Privacy Policy

1. Who we are

TenancyTrail is a trading name of AB Management Consulting Limited (ABMC Ltd) ("we", "us", "our"), a compliance services provider for UK letting agencies. We are the data controller for personal data collected through this website (for example, contact form submissions). When we process tenancy and compliance data on behalf of our letting agency clients, we act as a data processor under their instructions.

  • Registered company: AB Management Consulting Limited (ABMC Ltd), trading as TenancyTrail
  • Company number: 13923326
  • Registered in: England and Wales
  • Registered office: 71-75 Shelton Street, London WC2H 9JQ
  • ICO registration: ICO registration submitted
  • Email: contact@tenancytrail.co.uk

2. What data we collect

We collect the following personal data:

2.1 When you use our website

  • Contact form submissions: your name, agency name, email address, phone number (optional), number of branches, and any message you provide.
  • Technical and security data: information needed to deliver and protect the website, which may include IP address and request metadata processed by our hosting and security providers.

2.2 When you use our services

  • Agency data: business name, address, contact details, staff names, and branch information.
  • Tenancy data: property addresses, tenant names, tenancy dates, rent amounts, and compliance records (safety certificates, communications, complaints). This data is provided by you as our client and processed on your behalf.

3. How we use your data

PurposeLawful basis (GDPR Article 6)
Responding to enquiries submitted through our contact formLegitimate interest (pre-contractual communication)
Providing our compliance management servicesPerformance of a contract
Processing tenancy and compliance data on your behalfPerformance of a contract (we act as data processor)
Sending service-related communicationsLegitimate interest
Complying with legal obligationsLegal obligation

4. Data processor role

When providing our compliance management services, we act as a data processor on behalf of our letting agency clients, who remain the data controllers. We process tenancy data, tenant personal data, and compliance records strictly in accordance with our client’s documented instructions and a signed Data Processing Agreement where required.

We do not use data provided by our clients for any purpose other than delivering the agreed services. If a tenant wishes to exercise their data rights regarding tenancy records, they should contact their letting agency directly.

5. Data sharing

We do not sell your personal data. We may share data with:

  • Hosting and security providers: Cloudflare, which helps us host, secure, and deliver the website.
  • Email services: Resend, for processing contact form submissions and service communications.
  • Form protection providers: Cloudflare Turnstile, which helps us reduce spam and abuse on the contact form.
  • Professional advisers: legal, accounting, or audit professionals where required.
  • Law enforcement or regulators: where required by law.

6. Data retention

  • Contact form enquiries: retained for 12 months from the date of submission, or until the enquiry is resolved, whichever is longer.
  • Client service data: retained for the duration of our contract plus 6 years.
  • Tenancy and compliance records: retained as instructed by our clients in accordance with their retention policies.

7. Cookies and tracking technologies

We do not use analytics cookies or advertising cookies on this website.

The site uses Cloudflare Turnstile on contact forms to help reduce spam and abuse. Turnstile may use strictly necessary technical measures, including challenge-related storage or cookies, as part of that security function.

8. Your rights

Under UK GDPR, you have the right to request access to your personal data, correction of inaccurate data, deletion where appropriate, restriction of processing, data portability, and to object to processing based on legitimate interests.

To exercise these rights, contact us at contact@tenancytrail.co.uk. We will respond within one month.

9. Data security

We implement appropriate technical and organisational measures to protect personal data, including encrypted transport, access controls, secure hosting, and routine operational review.

10. International transfers

Your data may be processed in the United Kingdom or other jurisdictions used by our service providers. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

12. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated last updated date.