Privacy Policy
Who we are
Rent A Therapy Room is the trading name of Peter Klein, a sole trader in England and Wales. We are the data controller for the personal information described in this notice. That means we decide why and how your information is used.
Contact for anything in this notice, including data requests: hello@rentatherapyroom.co.uk. Postal address: London, United Kingdom.
We are not required to appoint a Data Protection Officer, but the contact above handles all data protection matters.
What this notice covers
This notice explains what personal information we collect when you use rentatherapyroom.co.uk, why we collect it, who we share it with, how long we keep it and what rights you have. It covers people who list a space, people who enquire about a space, and visitors to the site.
Information we collect
- Listing information you give us when you advertise a room, chair or space: your name, email address, telephone number, the address of the space, what the space is, how much it costs, and any photographs you upload.
- Enquiry information when you contact us or a lister through the site: your name, email address, telephone number and the content of your message.
- Account information if you register: your login details and profile information.
- Payment information when you pay for a listing or a featured option. Payments are handled by our payment providers. We receive confirmation that a payment was made and a reference, but we never store your full card details.
- Technical information created automatically when you visit: IP address, browser type and version, device type, the pages you visit and how you reached us. Our servers also keep security and error logs.
- Information you publish, including any details you choose to put in a listing, review or comment.
Please note: anything you put into a public listing, including a telephone number or email address, is visible to anyone who visits the site.
Listings we create ourselves
From time to time we add a listing for a space that a business already advertises publicly, for example on its own website or on a booking platform. When we do this, we use the contact details and description that the business has published itself. If you are the owner or manager of a space and you would rather your details were not listed here, email us at the address above and we will remove the listing.
Some listings are prepared and published with the help of automated tools. Those tools work only from information the business has already published. We do not use automated decision-making that produces legal effects for you.
Why we use your information
- To run the service you have asked for — publishing and managing your listing, passing your enquiry to the lister you contacted, and handling bookings, payments and receipts. Our lawful basis is performance of a contract.
- To keep the site safe and working — preventing fraud, spam and abuse, moderating listings, fixing faults and protecting our systems. Our lawful basis is our legitimate interests in operating a secure, trustworthy marketplace.
- To improve the site — understanding which pages and listings are useful. Our lawful basis is our legitimate interests in improving what we offer.
- To meet our legal obligations — for example keeping accounting and tax records. Our lawful basis is legal obligation.
- To email you about your listing or account, and, where you have agreed, with occasional news. Our lawful basis for marketing is consent, which you can withdraw at any time.
Who we share it with
We do not sell your personal information. We share it only as needed with:
- the person you contacted, when you send an enquiry through a listing, so they can reply to you;
- our hosting provider, Namecheap, Inc., which stores the site and its database on servers in the United States;
- our payment providers (WooCommerce Payments, Stripe and PayPal), to take and refund payments and to meet their own legal obligations;
- our email provider (Google Workspace), for correspondence and receipts;
- Cloudflare, which provides the bot-protection check on our forms;
- WordPress Gravatar (Automattic), which may receive an anonymised hash of your email address if you leave a comment, so that an avatar can be shown;
- professional advisers, such as our accountants, where necessary;
- law enforcement or regulators, where we are legally required to do so.
Some of our providers process data outside the UK — in particular our hosting provider in the United States, and our payment and email providers. Where that happens we rely on the UK’s adequacy regulations or a lawful transfer mechanism such as the International Data Transfer Agreement, or the UK Extension to the EU–US Data Privacy Framework where the provider is certified, together with the provider’s own safeguards.
How long we keep it
- Live listings: for as long as the listing is published, and for up to 12 months afterwards so we can restore or verify it if you come back.
- Enquiries: up to 12 months from the last contact, then deleted.
- Accounts: while your account is open and for up to 12 months afterwards.
- Payments, invoices and tax records: six years, as required by UK tax law.
- Server and security logs: up to 90 days.
- Comments and reviews: until you ask us to remove them or they are taken down by us.
Your rights
Under the UK GDPR you have the right to:
- access the personal information we hold about you, and receive a copy;
- have inaccurate information corrected;
- have your information erased where there is no good reason for us to keep it;
- restrict or object to some of our uses, including any based on legitimate interests;
- receive your information in a portable format, or have it sent to another provider;
- withdraw consent at any time where we rely on it;
- complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.
To exercise any of these rights, email hello@rentatherapyroom.co.uk. We will reply within one month. There is no charge unless a request is clearly unfounded or excessive. You can also ask us to delete your listing at any time, which removes the listing details from public view.
Cookies
We use cookies and similar technologies to keep you logged in, remember your choices, keep the site secure and process payments. Details are set out in our Cookie Policy.
Keeping your information secure
The site is served over encrypted HTTPS. Access to the site’s administration and database is restricted to those who need it, protected by passwords and, where available, two-factor authentication. If a breach ever puts your rights at risk, we will tell you and the Information Commissioner’s Office as required by law.
Children
This site is for people letting and renting space for professional use. It is not intended for children under 18, and we do not knowingly collect their information.
Changes to this notice
If we change how we use personal information, we will update this page and change the date below. Where a change is significant, we will tell you directly.
Last updated: 14 September 2026. This notice replaces all earlier versions.