This policy explains how RecuraFlow collects, uses and protects personal information when you join the waitlist or otherwise contact us through this website. We are committed to handling your data lawfully, transparently and securely.
1. Who we are
RecuraFlow ("we", "us", "our") is an open-banking platform for UK landlords and letting agencies, covering rent collection and the wider tenancy. For the personal data described in this policy, the data controller is RecuraFlow Ltd, a company incorporated in England and Wales. Our company number, registered office and ICO registration are shown in the footer of this page.
RecuraFlow Ltd is registered with the Information Commissioner's Office (ICO); our ICO registration number is shown in the footer of this page.
2. The information we collect
When you submit the waitlist form on this website, we collect:
- Your name — to address you correctly.
- Your email address — to contact you about the private beta.
- Your role — for example, letting agency, landlord or property manager.
- The number of tenancies you manage — given as a range.
- Your consent record — confirmation that you agreed to this policy, with the date and time.
We may also collect limited technical information automatically, such as the page you submitted from. We do not ask for, and you should not send us, financial details such as bank account or card numbers through this website.
If you go on to use the RecuraFlow platform (recuraflow.com sub-domains and apps) as a customer or tenant, additional information is collected as part of providing the service. The platform's privacy notice covers that information separately. Depending on the parts of the platform you use, that can include the bank you connect for open-banking rent payments, payment approval and consent evidence and transaction records (and, for platform-fee billing, Direct Debit mandate evidence); affordability and referencing information, including bank-transaction and credit data; identity-verification and anti-money-laundering checks; records shared with a credit reference agency where a tenant opts in to rent reporting; and information needed to introduce products such as insurance, deposit alternatives or a guarantor. The platform's privacy notice is available once you are invited into the beta.
3. How we use your information
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Contacting you about the private beta, onboarding and platform access | Consent |
| Understanding demand and prioritising who we onboard first | Legitimate interests |
| Responding to enquiries you send us | Legitimate interests |
| Keeping a record of consent and meeting our legal obligations | Legal obligation |
We will not use your details for unrelated purposes, and we will not sell them.
4. How your information is stored
Waitlist enquiries submitted through this website are sent to and stored in HubSpot, a customer relationship management (CRM) platform that we use to manage contacts. HubSpot acts as a data processor on our behalf. You can read HubSpot's own privacy notice at legal.hubspot.com/privacy-policy.
Some of our service providers may process data outside the UK. Where that happens, we rely on appropriate safeguards — such as UK adequacy regulations or standard contractual clauses — to keep your data protected.
5. How long we keep it
We keep waitlist enquiry data only as long as needed for the purpose it was collected: to manage the private beta programme and contact you about availability. If you ask us to remove your details, or you withdraw consent, we will delete them promptly unless we are required to retain certain records by law.
If you go on to use the RecuraFlow platform as a customer or tenant, certain records relating to your use of the service are retained for longer periods where law or scheme rules require it. In particular, where we collect evidence that a payer has approved a payment or set up an open banking payment consent — and, for platform-fee billing, authorised a Direct Debit Instruction — (timestamp, IP address, user-agent, the bank or provider reference, and the version of the consent text shown), we retain that approval and authorisation evidence indefinitely. This is because payment disputes can arise long after a payment, and Direct Debit indemnity claims under the Direct Debit Guarantee (which still applies to our platform-fee billing) have no time limit, so we may need this evidence years later to respond to a claim. Our lawful basis for this retention is legal obligation rather than legitimate interest. This retention overrides the standard data minimisation principle for this specific category of evidence and is documented in our internal data retention policy.
6. Sharing your information
We share personal data only with:
- Service providers who help us operate, such as our CRM (HubSpot) and our website or email hosting providers, all bound to protect your data.
- Authorities or advisers where we are legally required to, or to protect our legal rights.
We do not sell or rent personal data to third parties.
7. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your data.
- Object to, or ask us to restrict, certain processing.
- Ask for your data in a portable format.
- Withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise any of these rights, contact us at hello@recuraflow.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would welcome the chance to address your concerns first.
8. Cookies and analytics
This website uses only the cookies and similar technologies necessary for it to function and, where applicable, those set by HubSpot in connection with the waitlist form. If we introduce analytics or marketing cookies, we will update this policy and, where required, ask for your consent first.
9. Keeping your data secure
We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission over the internet is entirely secure, but we work to protect your information and to keep our practices under review.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. Significant changes will be made clear on this page.
11. Contact us
For any questions about this policy or about how we handle your personal data, contact:
RecuraFlow Ltd
Email: hello@recuraflow.com
Our postal address is shown in the footer of this page.