Privacy policy

Christian Rentalshelps Christians find flatshares. We collect only what we need to run the service, and we're specific about it below.

What we collect

• Account details — name, email, and optional profile information (photo, bio).
• Church and denomination — entirely optional. This is special-category data under UK GDPR; you volunteer it to show on your profile, and you can remove it at any time.
• Listings and messages — the content you post. Full postcodes and street addresses are never shown publicly; only the outcode (e.g. SW4) appears on listings.
• Identity verification — carried out by Stripe Identity. We never see or store your documents; we record only a pass/fail result.
• Payments — processed by Stripe. We never see your card details.
• Tenant reference checks — run only with your explicit consent, via a regulated UK provider. Reports are stored privately and deleted 90 days after the related listing closes.
• Proof-of-ownership documents — optional. If you choose to verify that you own or may let a property, any document you upload (e.g. a title, mortgage statement or council-tax bill) is stored privately, seen only by our small review team, and used solely to check the document appears genuine. Our lawful basis is our legitimate interest in preventing fraud. We keep only the file and a short type label — never its contents. The document is deleted as soon as it has been reviewed, and in any case no later than 90 days after upload; we retain only the review outcome (verified or not) and the date. You can withdraw and ask us to delete an unreviewed document at any time.

Your rights

You can access, correct, export, or delete your data at any time. From Settings → Your data & account you can download a copy of your data, and permanently delete your account — which removes your profile, listings, applications, messages and references. You can also email hello@christianrentals.orgfor any data request, and you have the right to complain to the UK Information Commissioner's Office (ICO).

Who we share data with

Stripe (payments and identity verification), our hosting providers (Vercel, Supabase — data stored in the UK/EU region), and Resend (transactional email). We never sell your data.