Legal
Privacy Policy
Knight & Co Properties
Last updated 15 September 2026
This Privacy Policy explains how Henri Knight trading as Knight & Co Properties (“we”, “us”, “our”) collects, uses, and protects personal data when you use our website and tenant portal (the “Site”).
We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This notice is written for a small private landlord portfolio — clear and proportionate, not a corporate template dump.
1. Who is responsible
Data controller: Henri Knight, trading as Knight & Co Properties.
For privacy questions or to exercise your rights, contact us via the Site’s contact form or ticket/support features. We do not publish a separate postal registered office or Companies House number in this notice; use the Site forms so we can verify and respond securely.
2. What this Site does
The Site includes:
- Public marketing pages
- A tenant portal (tenancy summary, documents, tickets/support, rent hub with standing-order guidance)
- Landlord admin tools (currently used by Henri Knight only)
We do not process card payments on the Site (no Stripe or similar). Rent is paid by standing order or other methods agreed outside the Site’s payment rails.
3. Personal data we may process
Depending on how you use the Site, we may process:
3.1 Account and authentication data
- Name and email address
- Login identifiers and authentication metadata (for example session or sign-in records via our auth provider)
- Role or access level (e.g. tenant vs admin)
3.2 Tenancy linkage
- Association between your account and a tenancy or property reference
- High-level tenancy summary information shown in the portal (for example tenancy status or key dates), as needed to operate the portal
We do not invent or display fabricated rent figures in this policy, and financial amounts shown in the portal (if any) come from records we maintain for the tenancy — not from card transactions on the Site.
3.3 Documents and portal content
- Documents we make available to you (or that you upload where the feature allows)
- Metadata about document access where needed for security or support
3.4 Tickets and contact forms
- Messages you send, including any personal details you include
- Ticket status, timestamps, and our replies
3.5 Compliance and workbook-synced references
- Compliance-related references synced from our internal workbook or records (for example certificate or check identifiers and related dates), used to support property and tenancy administration
- We do not use the Site to invent financial amounts; synced fields are operational/compliance references, not a full substitute for your tenancy paperwork
3.6 Technical and usage data
- Device/browser type, approximate location derived from IP (at a coarse level), pages viewed, and diagnostic logs
- Cookie or similar technology data (see section 8)
3.7 What we do not collect via the Site for payment
We do not collect full bank card numbers or run card checkout on the Site. Standing-order guidance may point you to payment arrangements agreed separately; those arrangements are not card processing by us through the Site.
4. Why we use your data (purposes and lawful bases)
| Purpose | Examples | Lawful basis (UK GDPR) |
|---|---|---|
| Provide and secure accounts | Sign-in, access control, fraud/abuse prevention | Contract (portal access) and/or legitimate interests (security) |
| Operate the tenant portal | Tenancy summary, docs, tickets, rent standing-order guidance | Contract / steps prior to contract; legitimate interests in efficient tenancy administration |
| Respond to enquiries | Contact forms, support tickets | Legitimate interests; contract where related to an existing tenancy |
| Property and compliance administration | Compliance refs synced from workbook | Legitimate interests; legal obligation where applicable (e.g. safety-related record-keeping) |
| Improve and maintain the Site | Diagnostics, fixing errors, uptime | Legitimate interests |
| Meet legal duties | Responding to lawful requests, defending claims | Legal obligation / legitimate interests |
Where we rely on legitimate interests, we balance those interests against your rights. You may object (see section 9).
We do not use your portal data for unrelated marketing profiling. If we ever seek consent for optional email updates beyond operational messages, we will say so clearly at the point of collection.
5. Where data comes from
- You — registration, forms, tickets, and information you submit
- Us as landlord — tenancy linkage and documents we associate with your tenancy
- Internal workbook / records — compliance and operational references synced into the system
- Service providers — authentication, hosting, and database logs generated when you use the Site
6. Who we share data with
We use processors who help us run the Site. Typical categories:
| Category | Role (illustrative) |
|---|---|
| Hosting | Site hosting (e.g. Vercel) |
| Database | Application data storage (e.g. Neon) |
| Authentication | Sign-in and session management (e.g. NextAuth with configured providers) |
| Email (optional) | Transactional or notification email (e.g. Resend), when enabled |
These providers process data on our instructions and under appropriate agreements. They may process data in the UK, European Economic Area, or other countries. Where data leaves the UK, we ensure an appropriate safeguard is in place (for example the UK International Data Transfer Agreement / Addendum, or adequacy regulations), as applicable.
We may also disclose data if required by law, to protect rights and safety, or in connection with a legal claim. We do not sell your personal data.
7. Retention (high level)
We keep personal data only as long as needed for the purposes above:
- Account data — for as long as your account is active, and for a reasonable period afterwards if needed for security or dispute handling
- Tenancy-linked and compliance records — aligned with the life of the tenancy and customary landlord record-keeping periods (often several years after a tenancy ends, especially where legal or safety records are involved)
- Tickets and contact messages — for as long as useful to manage the enquiry and maintain a support history, then deleted or anonymised when no longer required
- Technical logs — typically short periods unless needed to investigate incidents
Exact periods vary with legal requirements and the nature of the record. You can ask us for more detail about a specific category via the Site contact channels.
8. Cookies and similar technologies
The Site may use:
- Strictly necessary cookies or storage for sign-in, security, and load balancing
- Functional preferences where we offer them
- Limited analytics only if we enable them; if we do, we will update this notice and use a lawful basis (and consent where required)
You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent the portal from working.
9. Your rights under UK GDPR
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data in certain circumstances
- Restrict processing in certain circumstances
- Object to processing based on legitimate interests
- Data portability where applicable (data you provided, processed by automated means on the basis of contract or consent)
- Withdraw consent where processing is based on consent (without affecting prior lawful processing)
- Complain to the Information Commissioner’s Office (ICO): https://ico.org.uk
To exercise rights, contact us via the Site’s contact or ticket forms. We may need to verify your identity before responding. We aim to respond within one month, or as otherwise required by law.
10. Children
The Site is not directed at children. Tenancy accounts are intended for adults (or other persons we expressly authorise in connection with a tenancy). We do not knowingly collect children’s data through the Site for marketing purposes.
11. Security
We use technical and organisational measures appropriate to a small landlord portfolio Site — including access controls, encrypted connections (HTTPS), and reliance on reputable hosting and database providers. No online service is completely secure; please protect your password and tell us promptly if you suspect misuse of your account.
12. Automated decision-making
We do not use automated decision-making that produces legal or similarly significant effects about you solely by automated means without human involvement, as part of the Site’s normal operation.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Significant changes will be indicated on the Site or communicated through the portal or contact details we hold, where appropriate.
14. Contact
For privacy requests or questions, use the contact form or ticket/support features on the Site. Please do not send sensitive tenancy documents through insecure channels if a portal upload or agreed method is available.
Knight & Co Properties — Privacy Policy (UK GDPR / England & Wales)
