Privacy & Cookie Policy Last Updated: 10 May 2026

1. Introduction

DocRight Ltd ("we," "us," or "our") is registered in Scotland, company number SC872040. We are registered with the Information Commissioner's Office, registration number ZC104944.

This policy explains how we collect, use, and protect personal data when you use our services, including our free Rent Arrears Guide and our Evidence Vault subscription product. It also explains how we use cookies on our website at docright.co.uk.

2. Data We Collect

When you request the free Rent Arrears Guide: We collect your email address only. This is used solely to deliver the guide to your inbox.

When you use the Evidence Vault: We collect information you provide during registration and use of the service, including:

• Landlord details: name, email address, and postal address

• Property details: address of each rental property

• Tenant details: names, contact details, and tenancy information as entered by you

• Compliance records: safety certificates, deposit protection records, inspection logs, rent ledger entries, correspondence records, and related documentation

• Payment data: processed securely via Stripe. We do not store your card details on our servers.

3. How We Use Your Data

Guide requests: To deliver the Rent Arrears Guide to the email address you provided. We may send occasional updates about DocRight's services. You can unsubscribe at any time.

Evidence Vault: To provide and operate the Evidence Vault service, process your subscription payment, store and organise the compliance records you upload, and comply with legal and regulatory obligations.

We do not sell your data to third parties. We do not use tenant data for marketing or profiling.

4. Lawful Basis for Processing

Under UK GDPR, we process guide request data on the basis of consent. You may withdraw consent at any time by unsubscribing or contacting us at hello@docright.co.uk.

We process Evidence Vault data on the basis of contractual necessity — to provide the service you have subscribed to.

5. Third-Party Processors

To provide our services, we share data with the following processors:

• Fillout — to capture form responses and deliver the guide by email

• Airtable — to store and organise compliance records within the Evidence Vault

• Softr — to provide the Evidence Vault front-end interface

• Stripe — to process subscription payments securely

• Google LLC — to measure site traffic via Google Analytics and to run and measure advertising via Google Ads. Google processes data under standard contractual clauses. See google.com/privacy.

All processors are bound by data processing agreements and handle your data only as directed by us.

6. Data Retention

Guide requests: We retain your email address until you unsubscribe or request deletion.

Evidence Vault: We retain your data for the duration of your subscription and for 12 months following cancellation. This allows you to retrieve records if needed after cancellation. After this period, personal data is anonymised or deleted. You may request earlier deletion at any time.

7. Tenant Data

Tenant personal data entered into the Evidence Vault is processed solely for the purpose of organising your compliance records. It is not used for marketing, profiling, or any purpose other than providing the Evidence Vault service.

You are responsible as the data controller for ensuring you have a lawful basis to enter tenant data into the system and for informing tenants that their data is held in this way.

8. Your Rights

Under UK GDPR you have the right to access, correct, or delete your personal data at any time. You also have the right to data portability and the right to object to processing.

To exercise any of these rights, contact us at hello@docright.co.uk. We will respond within 30 days.

If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to the Evidence Vault is protected by user authentication.

10. Changes to This Policy

We may update this policy from time to time. We will notify active Evidence Vault subscribers of material changes by email. The current version is always available at docright.co.uk/privacy.

11. Contact

DocRight Ltd · SC872040 · hello@docright.co.uk

Registered in Scotland · ICO registration number ZC104944

12. Cookies

Our website uses cookies to operate and improve your experience. A cookie is a small text file stored on your device when you visit our site.

Cookies we use:

CookieProviderPurposeDuration_ga, ga*Google AnalyticsMeasures how visitors use our site — pages visited, time on site, and traffic source. Data is anonymous and aggregated.2 years_gcl_auGoogle AdsMeasures whether visitors who clicked our ads went on to request the guide.90 days_gcl_awGoogle AdsConversion tracking — records guide download conversions from paid ads.90 daysFramer consentFramerRemembers your cookie preference so we do not ask you again.1 year

Analytics and advertising cookies are only placed on your device after you click Accept All.

If you click Reject All, no tracking cookies are stored on your device. We may still receive anonymous, aggregated data from Google's modelling tools but this data cannot identify you individually.

Your cookie choices

When you first visit our site a cookie banner will appear. You can:

• Click Accept All to allow analytics and advertising cookies

• Click Reject All to decline all non-essential cookies

You can change your preference at any time by clearing your browser cookies and revisiting our site. You can also manage or delete cookies directly in your browser settings — see your browser's help pages for instructions.

For more information about cookies generally visit allaboutcookies.org.

Cookies and your rights

You have the right to refuse non-essential cookies. Rejecting cookies does not affect your ability to use our website or access the free guide. It only affects whether we can measure and improve our site using analytics data.