How we collect, use, and protect personal data
Last updated: September 2026
Note: This is a living stub for the marketing site. Subscribing agencies receive fuller processing terms in their agreement.
SafeToLet is a product of CX1 Ltd, a company registered in the United Kingdom.
For UK data protection law (UK GDPR and the Data Protection Act 2018), CX1 Ltd is the data controller for personal data collected through the SafeToLet marketing website.
When an agency uses the app, we process property, certificate, and staff data as a data processor on the agency’s behalf. The agency remains the controller for that data. Processing is governed by the subscription terms and, where applicable, a data processing agreement.
Legal basis: legitimate interests (responding to enquiries, improving services) and, where applicable, consent.
We do not sell personal data. We may share data with hosting and infrastructure providers (AWS, UK region) under contract, professional advisors, or where required by law.
We use HTTPS/TLS, encryption at rest, access controls, and UK hosting (AWS London). See Data Security.
You may request access, rectification, erasure, restriction, portability, or object to legitimate-interests processing. Contact hello@safetolet.uk. You may also complain to the ICO (0303 123 1113).
The marketing website currently uses only essential technical cookies. We do not use advertising cookies on these pages.
We may update this policy. The “Last updated” date shows the latest revision.