Privacy notice

Letward is run by Will Roxby, trading as Letward. He is the controller of the personal data described on this page. That means he decides how it is used and is responsible for looking after it.

Contact: hello@letward.co.uk. A postal address is available on request.

The register checker needs no account. We send the postcode you enter to postcodes.io to find its local authority and region. We keep the answer in our server's memory for up to 24 hours so the same postcode is not looked up twice. It is not linked to you and is not written to our database.

To stop one connection running thousands of lookups we keep a one-way hash of your IP address in memory for 10 minutes. We cannot turn the hash back into your IP address.

You sign in with a one-time link sent to your email address. We use the address to send that link and to contact you about your account. There is no password. Our lawful basis is contract.

Property records, right to rent records and reminders are not open yet. Before they open we will update this notice with what they hold, how long we keep it and which providers send reminders by email and text.

These providers run Letward for us. Those that handle personal data process it under contract and only on our instructions. We do not sell personal data or share it for advertising.

• SupabaseDatabase and sign-in.London, UK
• RenderHosts the website.Frankfurt, Germany
• ResendSends sign-in emails.United States
• postcodes.ioFinds the region of a postcode entered in the free register checker. Our server sends it the postcode only, never your IP address.Run by Ideal Postcodes, London, UK. Server location not published

Provider details from their own pages: Resend, Regions; postcodes.io, Overview; Ideal Postcodes, Privacy policy. Checked on 10 October 2026.

We may also share data where the law requires it, for example with HMRC.

Will Roxby also runs other online services. They share one secure sign-in system.

Your Letward account and its data are kept separate from any other service. We never share your data between services. We never use it to market our other services to you.

Your email address is how you sign in. If you change it, the change applies to signing in everywhere you use that address with us.

Our database is in London and our hosting is in Frankfurt. Resend is based in the United States. Where data leaves the UK we rely on UK adequacy regulations or on standard contractual clauses with the UK addendum, which require the provider to protect it to UK standards.

• Account details: while your account is open. Ask us to close it and we delete them within 30 days.
• Register checker: nothing is written to our database. The memory cache and the connection hash expire as described above.
• Emails to hello@letward.co.uk: kept while we need them to deal with your message.

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you
• correct anything that is wrong
• delete your data
• restrict how we use it
• give you your data in a format you can take elsewhere

Email hello@letward.co.uk. We will reply within one month.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

The public pages and the register checker set no cookies. We set cookies only to sign you in. They are strictly necessary, so we do not ask for consent. We do not use analytics, advertising or tracking cookies.

• A sign-in check, named sb- then a code ending -auth-token-code-verifier. Set when you ask for a sign-in link. The sign-in system uses it to finish signing you in.
• Your session, named sb- then a code ending -auth-token. Set when you sign in and kept for up to 400 days unless you sign out. A long session can be split across two or three cookies with the same name and a number on the end.

If we change how we use personal data we will update this page and the date at the top. See also our Terms.