Rentably - Privacy Policy Last updated: 11 November 2025 This Privacy Policy explains how Circuit Software Ltd (“Circuit Software”, “we”, “us”, or “our”) collects and processes personal data in connection with the Rentably mobile application and related services (“App”). We are registered in England and Wales. By using the App, you acknowledge this Policy. This Policy complements (and does not replace) our Terms of Use and the applicable App Store terms. 1. Who we are and roles • Controller: Circuit Software Ltd is the data controller for your account data, support communications, service operations and security. • Processor: For landlord-submitted content (e.g., tenant details, documents) we act as a data processor, processing such data on the landlord’s instructions to provide the App’s features. Contact: hello@circuitsoftware.co.uk Address: 51 Clare Road, Maidenhead, Berkshire, SL6 4DW, United Kingdom 2. Data we collect • Account data: name, email, authentication identifiers. • App content (landlord-submitted): property records, tenancy details, tenant contact details, expenses and servicing information, documents you upload. • Device/usage data: app interactions, diagnostics/crash logs, and technical identifiers necessary for performance and security. • Support: messages you send to us and related metadata. We do not access contacts, photos, or location without your explicit action and permission. 3. Sources of data • You (account setup, in-app actions, uploads). • Other users (e.g., a landlord inviting a tenant; the landlord provides the tenant’s email). • Your device (diagnostics, security and performance signals). 4. How we use personal data • Provide and maintain your account and App functionality. • Sync and display property/tenancy/expense records and documents as instructed by you. • Improve safety and performance, including diagnostics, troubleshooting, abuse prevention and security monitoring. • Communications: operational notices (e.g., service or policy updates). We do not sell personal data or share it for advertising purposes. 5. Lawful bases (UK GDPR) We rely on: • Contract (Article 6(1)(b)) — to provide the App and features you request. • Legitimate interests (Article 6(1)(f)) — to maintain, secure and improve the App, prevent misuse, and protect our rights (balanced against your interests). • Consent (Article 6(1)(a)) — where you opt in to optional features or device permissions. • Legal obligation (Article 6(1)(c)) — where processing is necessary for compliance (e.g., tax, fraud prevention, regulatory requests). 6. Sharing and processors We share personal data only with: • Service providers acting under contract (e.g., cloud hosting, logging/diagnostics, customer support tools, subscription management), bound by confidentiality and data protection terms. • Platform providers (Apple/Google) for in-app purchases and account administration you initiate via their stores. • Authorities or parties where required by law, to protect rights, or in connection with corporate transactions. We do not share identifiable data with third parties for marketing. 7. International transfers Where data is processed outside the UK, we implement appropriate safeguards (such as the UK Addendum/IDTA to the EU Standard Contractual Clauses) to protect your information and your rights. 8. Retention and deletion • You may deactivate your account at any time in-app or by contacting us. • After deactivation, account and related content are scheduled for permanent deletion after 30 days. • System backups and security logs may persist for a further limited period, after which they are automatically purged. • We may retain limited information if required by law or to establish, exercise, or defend legal claims. 9. Security We use appropriate technical and organisational measures, including encryption in transit, access controls, and environment hardening. No method of transmission or storage is 100% secure. 10. Your rights Under the UK GDPR/Data Protection Act 2018, you have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where relied upon. How to exercise: email hello@circuitsoftware.co.uk. We may request ID verification and will respond within one month (extendable as permitted for complex requests). You may lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/. 11. Children Rentably is not intended for individuals under 18. We do not knowingly collect children’s data. If you believe a child has provided personal data, contact us to delete it. 12. Changes to this Policy We may update this Policy from time to time. If we make significant changes, we will notify you in-app or by email before they take effect. The “Last updated” date shows the current version.