Data Processing Agreement
Last updated: 6 May 2026
1. Roles
realgood is the data controller for landlord personal data. realgood is the data processor for tenant personal data, processed on the landlord's behalf and under the landlord's instructions.
2. Tenant data processing
Tenant data processing is limited to: name, email address, and property address. This data is processed solely for the purpose of serving the statutory Information Sheet as required by the Renters' Rights Act 2025. Tenant data is not used for any other purpose.
3. Landlord responsibility
The landlord is responsible for having a lawful basis to share tenant personal data with realgood. The landlord warrants that they have the legal right to provide tenant data for the purposes described.
4. Data retention
Tenant data is deleted within 90 days of service completion unless the landlord requests earlier deletion. Landlords may request deletion at any time by contacting privacy@realgood.co.uk.
5. Sub-processors
realgood uses the following sub-processors for database and authentication, payment processing (Stripe), and email delivery (Resend). Each sub-processor is bound by appropriate data processing agreements.
6. Compliance
This agreement is compliant with UK GDPR Article 28. realgood implements appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, and regular security reviews.