Privacy Notice: Rent Repayment Order Tenant Pack Purchases
Last updated 30 October 2026. This notice covers personal data we use when you buy the Rent Repayment Order Tenant Pack from hmoregister.co.uk. Our separate website notice covers people who only visit the site or apply for a business listing.
Who is responsible for your data
Noverquis Ltd, company number 17521667, 37 Longfellow Way, London SE1 5TB, is the controller of the personal data described here. Contact: [email protected].
What we collect and why
| Data | Why we use it | Lawful basis (UK GDPR art. 6) |
|---|---|---|
| Name and email address | To take your order, send your confirmation and download link, and answer your questions | Contract (art. 6(1)(b)) |
| Order details: product, price, date and time, order reference, Stripe payment reference, payment status | To deliver the pack, keep accounting records and deal with refunds | Contract; legal obligation (art. 6(1)(c)) for accounting and tax records |
| Record of your consent and acknowledgement at checkout (the time you ticked the boxes) | To show we met the cancellation-right rules for digital content | Legitimate interests (art. 6(1)(f)) in being able to prove what was agreed |
| Messages you send us | To handle support, faults, refunds and complaints | Contract; legitimate interests |
| Basic technical data when you use the download link (such as the time of download and an IP address held in our server logs) | To keep the download secure and prevent misuse and fraud | Legitimate interests |
We do not receive or store your full card number. You enter card details on Stripe's own payment page.
We do not ask for details of your rent, your landlord or your tribunal case, and we do not see what you write in the documents. Please do not email us sensitive details of your case.
Who we share it with
- Stripe (the Stripe group company that provides payment services to us), which processes your payment. Stripe acts as an independent controller for payment, fraud and legal compliance purposes. Its notice is at https://stripe.com/gb/privacy .
- Our website host and email provider, who act on our instructions.
- Professional advisers, our bank and authorities where the law requires.
We do not sell your data and do not use it for marketing unless you separately agree.
Transfers outside the UK
Some of our providers, including Stripe, may process data outside the UK. Where they do, the transfer relies on UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or another safeguard allowed by UK data protection law.
How long we keep it
- Order and payment records: 6 years from the end of the financial year of the sale, as tax and accounting rules require.
- Support messages: up to 2 years after our last contact with you, unless needed for a complaint or claim.
- Server logs: up to 12 months.
Your rights
Under UK data protection law you can ask us for a copy of your data, to correct it, to delete it (where we do not need to keep it), to restrict or object to some uses, and to receive it in a portable form. Email [email protected]. We will reply within one month.
If you are unhappy with how we handle your data, please tell us first so we can put it right. We will acknowledge a data protection complaint within 30 days and reply without undue delay. You also have the right to complain to the Information Commissioner's Office: https://ico.org.uk/make-a-complaint/ or 0303 123 1113.
Providing your data
You must give us your name and email address to buy and receive the pack. If you do not, we cannot supply it.
Changes
We will update this notice if how we use your data changes and show the date at the top.
Sources (checked 30 October 2026)
- UK GDPR, art. 6: https://www.legislation.gov.uk/eur/2016/679/article/6
- Information Commissioner's Office: https://ico.org.uk/