1.Who we are
Verv in the United Kingdom is operated by Habitae Limited, a company registered in England and Wales (company number 17162166), registered office 24 Agamemnon Road, London NW6 1DY. Habitae Limited is the data controller for personal data processed through verv.co.uk.
Data protection enquiries: legal@verv.co.uk.
2.If you are a landlord
We collect your name, contact details, bank details for payouts, and information about the property you list, including address, photos, floor plans, EPC and safety certificates.
3.If you are a tenant or applicant
We collect your name, contact details, income and employment information, referencing and credit check results, Right to Rent documents, and any information you give us in an application or enquiry.
4.What we use it for, and why we are allowed to
- Creating and running your account, or listing a property: contract (Article 6(1)(b)).
- Tenant referencing, credit and identity checks: contract with the applicant, and the landlord's legitimate interests (Article 6(1)(f)).
- Right to Rent document checks: legal obligation (Article 6(1)(c)), Immigration Act 2014.
- Fraud prevention and platform security: legitimate interests (Article 6(1)(f)).
- Analytics and product improvement: consent for non-essential cookies, otherwise legitimate interests.
- Marketing emails: consent (Article 6(1)(a)), or the soft opt-in under PECR regulation 22.
- Tax, accounting and anti-money-laundering records: legal obligation (Article 6(1)(c)).
Where we rely on legitimate interests, we have balanced that interest against your rights. Ask legal@verv.co.uk if you would like to see that assessment.
5.How long we keep it
- Account and listing data: for the life of your account, then 6 years, per the Limitation Act 1980.
- Referencing and credit report data for successful applicants: 12 months from completion of the report.
- Referencing data for unsuccessful applicants: 6 months from the decision, then deleted.
- Right to Rent document copies: for the tenancy plus 1 year, then securely destroyed, per the Home Office code of practice.
- Payment and invoice records: 6 years from the end of the financial year, per the Companies Act 2006 and HMRC requirements.
- Enquiry and marketing data: 24 months from your last contact with us.
- Analytics and cookie data: 14 months.
6.Who else sees it
We share data with providers where it is necessary to deliver the service: our tenant referencing and credit reference provider, our identity verification provider, our payment processor, our email and CRM provider, and our hosting provider.
If a referencing check involves a credit search, that search will be recorded and the provider's own privacy information applies to that part of the process. We will link it at the point you apply.
We do not sell your personal data, and we do not share it for anyone else's marketing.
7.Right to Rent and immigration documents
We collect copies of the documents needed to carry out a Right to Rent check where the law requires one, such as passports, biometric residence permits, or a share code result. These are held in a restricted-access store, used only for that check and for our legal obligation to the landlord, and retained for the tenancy plus 1 year before secure destruction. We do not use immigration status for any other purpose.
8.Automated decisions
Where a referencing or risk-scoring result contributes to a decision about a tenancy application, that involves automated processing under Article 22. You have the right to know the logic in general terms, to ask for the decision to be reviewed by a person, and to challenge it. Contact legal@verv.co.uk to ask for a human review of any automated decision that affects you.
9.Where your data is processed
Where personal data is processed outside the UK or EEA, including by our operations in Bangladesh or North Macedonia, we put a UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses in place first, along with a transfer risk assessment.
UK tenant data is not routinely transferred outside the UK or EEA. Where it is, one of those safeguards applies.
10.Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct it if it is wrong.
- Ask us to delete it.
- Restrict how we use it.
- Object to processing based on legitimate interests.
- Object to direct marketing at any time.
- Take your data elsewhere in a portable format.
- Withdraw consent where we rely on it.
These rights are not conditional on where you live in the UK. To ask, email legal@verv.co.uk. We will respond within one month.
You also have the right to complain to the Information Commissioner's Office, at ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, helpline 0303 123 1113, ico.org.uk/make-a-complaint. We would ask you to contact us first so we can try to put it right.
11.Cookies
We explain the cookies we set, and how you can control them, in our Cookie Policy.
12.Changes to this policy
We will update the date at the top of this page whenever we make a material change, and where the change is significant we will tell you directly.