Privacy

How Flat Reviews looks after your personal data. Last updated: October 2026.

Who we are

Flat Reviews is run by JJ Agency Limited, a company registered in England and Wales (No. 15218044), 82A James Carter Road, Mildenhall, Suffolk, IP28 7DE, UK. We are the “controller” of the personal data described here. Questions about your data: johnny@jj-agency.co.uk.

What we collect

• When you write a review: your full name, your email, the address and details of the home, your ratings and review, when you lived there, the rent band and bills if you choose to give them, any photos you add, and your tenancy agreement or proof of address.
• When a landlord or agent asks to reply: their name, email, role, the name to show on replies, a document that shows they own or manage the property, and any photos they add to a reply.
• When you report a review: what you tell us, and your email if you give it.
• When you make a legal complaint about a review: your name, email, who you are, and your complaint. If you wrote a review that someone complains about and you choose to keep it, your full name and postal address.
• To stop spam and abuse, a scrambled (hashed) version of your IP address, so we can limit how many forms are sent from one place.
• Your light or dark mode choice is saved only in your own browser. We don’t receive it.

Why we use it

• To check that you lived at the address, and to publish your review: translated into English, with personal names hidden.
• To keep your name and document as proof that you were entitled to write your review, for example if it is disputed. This is our legitimate interest in running a fair review site and in defending legal claims.
• To handle legal complaints under the Defamation (Operators of Websites) Regulations 2013: we send the complaint to the person who wrote the review, and tell both sides what happens. This is our legal obligation and our legitimate interest in handling complaints fairly.
• To email you: to confirm your review, to send your private link to edit or delete it, and to tell you when a landlord replies.
• If you were a JJ Agency client, we may invite you once by email to review your flat. Every invitation has an unsubscribe link.

What is shown on the site

Your review, ratings, the boxes you ticked, the type of home, the months you lived there, the rent band and bills if you gave them, your photos once they’re checked, and the “Verified tenant” label. Never your name, your email or your document.

Photos

Photos you add are shown publicly with your review. Before that, we remove the location and camera details stored inside them, our AI checks them, and we send the ones without people or personal details to Google (Cloud Vision) to search the web for the same picture, so we don’t show photos copied from adverts or other websites. Google does this for us and doesn’t publish them.

Who can see or process it

• Our moderators (the JJ Agency team), who check reviews, reports and landlord requests.
• Cloudflare: website hosting, our database, private document and photo storage, and the AI that reads documents, translates reviews, hides names and checks photos.
• Google Cloud Vision: it searches the web for photos you add, to check they aren’t copied from adverts or other websites.
• Resend, which sends our emails.
• Ideal Postcodes: when you type a postcode, we send it to them to list the addresses in it (Royal Mail data).
• The government’s energy certificate register and postcodes.io: we send them only the postcode and address of the home, to find its energy certificate and area.
• Google Fonts loads the site’s fonts, so it sees your IP address when a page opens.
• In a legal complaint: the writer of the review sees the complaint, and the complainant’s name and email only if the complainant agreed. The complainant gets the writer’s name and address only if the writer agreed, or if a court orders us to.
• Courts and authorities, when the law requires it.

Landlords and agents never receive your name, email or document. Some providers work outside the UK; when data is transferred abroad, we use the safeguards required by UK law.

How long we keep it

• Your name and document: while your review is online and for 1 year after it is removed. If you delete your review, or we don’t publish it, they are deleted straight away.
• Your photos: while your review is online. If you delete a photo or your review, or we don’t publish your review, they are deleted straight away. Photos we don’t show are deleted after 30 days.
• Reviews nobody confirmed by email are deleted after 7 days.
• Legal complaints and the answers to them: for 1 year after the complaint is closed, then deleted.
• Landlords’ and agents’ documents are deleted as soon as our moderator has checked them.
• If you unsubscribe, we keep your email on a “do not email” list so we never email you again.

Your rights

You can ask us to show you your data, correct it, delete it, limit how we use it, object to its use or send it to you in a portable format. Write to johnny@jj-agency.co.uk. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

Flat Reviews is not for children: you must be 18 or over to write a review. If we change this notice in an important way, we email the people it affects.

We don’t use advertising or tracking cookies, and we don’t sell your data.