- For the purpose of the General Data Protection Regulation, Flatshare Limited ("We", "Us" "Our") will be the data controller in respect of any personal data you submit to us or which we collect from you when you use our website. We are a private limited company with company registration number 04407847 – our registered office is at Suite 2.06, Colony One Silk Street, Ancoats Urban Village, Manchester, M4 6AG, United Kingdom. For more information see 'about us'.
Colony One Silk Street
Ancoats Urban Village
Phone: 0161 768 1162
The information we collect from you and the lawful basis for processing it
- We collect the information you provide to us when you register on the site, including your name, gender, email address and search preferences. We use this information to create a user account for you on our site and to provide our services to you, including publishing your adverts on the site and facilitating introductions with other members of our site. However, we will not share your email address with other users of the site unless you have specifically chosen to disclose it. Where you have not opted out of receiving them, we will also use this information to send you email notifications of other users’ adverts matching your search preferences and/or newsletters about our own services we think may be of interest to you from time to time. We will not sell or rent any of this information to any third parties nor send you any third party marketing communications unless you have specifically opted in to receiving them. Our lawful basis for processing this information is that the processing is necessary for performance of a contract.
- Any information you include in any advert you post on our site will be collected by us and stored on our servers for the purposes of making the website, and the content contained within it, available to our users, and to enable our users to search for and respond to adverts on the site. Our lawful basis for processing this information is that the processing is necessary for performance of a contract.
- In the event you are asked to submit any sensitive personal data as part of the process for posting adverts on the site you’ll be asked to tick a box to demonstrate your consent to our collecting and storing that information and to us making that information available to other users through the site. Our lawful basis for processing this information is ‘consent provided by the data subject’.
- We may collect any information contained in correspondence between you and us. For example, if you contact us we may keep a record of that correspondence. We may also ask you for information when you report a problem with our website or any content or services made available through it. Our lawful basis for processing this information is the legitimate interest of the company. Namely, to ensure that the services we offer remain suitable for our customers, and to help resolve issues with our platform.
- We may also collect and store any information contained in communications between yourself and other users on the site, where such communications have taken place via our on-site messaging system. We do not routinely monitor all communications but we may use software to track communications and we reserve the right to monitor them in order to investigate any suspected breach of our terms and conditions, illegal behaviour or any other misuse of our service or for any other reasonable reason as determined by us from time to time. Our lawful basis for processing this information is the legitimate interest of the company. Namely, to ensure that the services we offer remain suitable for our customers, to help resolve any customer disputes, to facilitate the identification of fraudulent activity and to assist any other legal investigations.
- If you choose to register and log in to our site using your Facebook profile you are agreeing to share some of the information contained in your Facebook profile with us, such as your age, gender, friends list, your education and work history, your email address and your interests. We may use this information to improve your user experience on the site and to match you with other users of the site who you are already friends with on Facebook, or who have similar interests or histories to you. Our lawful basis for processing this information is the legitimate interest of the customer. Namely, to ensure that the services we offer remain suitable for our customers, and to improve customers' experience of our platform. If at any time you would like to request that the information we have received from Facebook is deleted, then please follow the process set out in section 11.
- We may also receive personal data about you from various third parties. For example, we may receive details such as your mobile number, name, address, email address, network status, customer type, customer role, billing type, mobile device identifiers (IMSI and IMEI) and other subscriber status and device details from your wireless operator via our third party ID verification service provider. Our lawful bases for processing this information is that the processing is necessary for performance of a contract with you and the legitimate interests of the company, namely for running our business, ensuring services remain suitable, verifying your identity, to prevent fraud and improve user experience.
- If you are a journalist or social influencer, we may receive personal data about you, such as your name, email address, job title, place of work, phone number, and social media information from third party providers of contact databases relating to journalists and social influencers. We may use this information to provide you with information that may be of interest to you or relevant to you. Our lawful basis for processing this information is the legitimate interests of the Company, namely to develop our products/services, encourage customer engagement and grow our business.
Use of your information
- to ensure that content from the website is presented in the most effective manner for you and for the device you’re using. Our lawful basis for processing this information is the legitimate interest of the customer. Namely, to ensure that the services we offer remain suitable for our customers, and to improve customers’ viewing experience of our platform;
- to send you alerts about adverts that match your search preferences and to let you know when other users of the site have expressed an interest in any adverts you have posted to the site. Our lawful basis for processing this information is the legitimate interest of the customer. Namely, to ensure that the services we offer remain suitable for our customers, and to improve our customer service;
- to provide you with other marketing communications by post and/or electronic means (such as email, SMS and/or MMS) about our products, services, events, special discounts and offers, which you have requested to be sent or which we feel may interest you, where you have not opted out of being contacted for such purposes. Our lawful basis for processing this information is the legitimate interest of the company. Namely, to encourage customer engagement with our platform. We will always follow the guidelines established by the Privacy and Electronic Communications Regulations when contacting you via email or SMS. We only contact users with whom we have an existing customer relationship, and we will only contact you about services that are similar to those you have already signed up for. You are free to unsubscribe at any time through the ‘Email alerts’ section of your ‘Account’ menu, which can be reached by clicking the unsubscribe link in any of our emails;
- to send you other general (non-marketing) commercial communications, such as information about the website and services provided to you by us at that time. Our lawful basis for processing this information is the legitimate interest of the customer. Namely, to ensure that the services we offer remain suitable for our customers, and to improve our customer service;
- to provide customer service in relation to your use of the website, to contact you, to deal with enquiries and complaints relating to the use of the website and to notify you about changes to our services. Our lawful basis for processing this information is that the processing is necessary for performance of a contract;
- to develop, improve and personalise our website and associated applications in order to improve your SpareRoom experience. This is in the legitimate interest of our customers, which provides our lawful basis for this processing, as it enables us to ensure that the services we offer continue to be suitable for our customers, and to improve our customer service. We share data with the organisations listed below, which will never share your data with anyone else:
- Firebase & Fabric - to assist with reducing iOS and Android application crashes and monitoring
- AppsFlyer - Application usage information and advertising campaign attribution
- HotJar - to improve website user experience
- Facebook Analytics - to help us understand our users' usage and behaviour across our platforms
- to provide third parties with statistical information about our users - this information will not be able to be used to identify any individual user.
Disclosure of your information to recipients (or categories of recipients)
We may disclose your personal information to:
- a third party, if you have chosen to log in to our site by using your profile and account details from that third party’s own website, such as Facebook;
- any third party who intends to publish any comments or reviews you’ve written about our site in any medium, including on third party websites, so your comments and reviews can be verified by that third party;
- any third party to whom disclosure is necessary to enable us to provide you with any services or products that you have requested through the site;
- any person to whom disclosure is necessary to enable us to enforce our legal rights, or to protect the rights, property or safety of Flatshare Ltd or our customers or employees or where such disclosure may be required by law; and/or
- any acquirer or potential acquirer of all, or substantially all, of the share capital or assets of Flatshare Limited.
- You should note that the public elements of the website, including any adverts you post on the site, will be visible to other users of the website anywhere in the world. You should therefore be careful when submitting information about yourself and only submit information you’re happy to be publicly available.
- Some cookies we use are necessary for our website to function properly and to enable you to move around the site and use its features. In addition we also use so called "functional" cookies, which allow our website to remember choices you’ve made in relation to the website, so as to provide a more personalised and enhanced user experience. Examples of the functional cookies we use on the site, and the information we collect through the use of those cookies, include those that remember details about your account preferences, including your password and login details, your search history and adverts you have posted to the site, the types of alerts and newsletters you have opted to receive and the types of adverts you are interested in hearing about.
- As mentioned above, we may also use an analytics service provider, such as Google Analytics, for website traffic analysis and reporting. Analytics service providers generate statistical and other information about website use by means of cookies that are stored on users' computers. The information generated relating to the website may be used to create reports about the use of the website - the analytics service provider will store this information. Individual users will not be identifiable from this information.
- In addition, we are also using the following types of cookies on the site:
- Google AdWords
- Using Google AdWords code, we are able to see which pages helped lead to registering and, where applicable, upgrading. This allows us to make better use of our paid search budget on Google.. You can also choose to opt-out of AdWords remarketing here.
- We use Google Analytics remarketing codes to log when users view specific pages or take specific actions on the website. This allows us to provide targeted advertising in the future when you browse other websites.
- Facebook Pixel
- We use the Facebook Pixel to understand how people we advertise to on Facebook, and Facebook partners, interact with our site. The Facebook Pixel also allows us to identify groups of Facebook users who are similar to groups of SpareRoom users and advertise our services to them. Guidance on how to opt out is available here.
- Google Analytics Demographics and Interest Reporting
- These help us better understand who our users are so we can make content on other channels, such as YouTube, more relevant. You can choose to opt out of these cookies here.
Turning off cookies
- If you don’t want us to install cookies on your computer for these purposes, you can change the settings on your internet browser to reject cookies. All modern browsers allow you to change your cookie settings. These settings will typically be found in the 'options' or 'preferences' menu of your browser. In order to understand these settings the following links may be helpful, otherwise you should use the 'Help' option in your browser for more details:
All payment for any products or services offered through our site, including for any adverts or Early Bird, access are made via a secure server provided by our third party payment processors, currently Stripe, WorldPay and Paypal. We will not collect, store or process any credit card or other payment information on our own servers. We are a Safe Buy accredited website.
Third party content, websites and contributors
- Our website may contain content and links to other websites and microsites that are operated by third parties. In addition, advertisements contained on our website may operate as links to that advertiser’s website, and such advertisers and third parties may also use and place cookies on your computer.
Security and data retention
- We employ appropriate technological and operational security measures to protect against any unauthorised access to or unlawful processing of any personal information about you that we hold. We will retain your information for a period as defined in our data retention policy or as long as the law requires or permits.
- Data transmission over the internet is inherently insecure. Although we employ appropriate technological and organisational security measures to protect your data we cannot guarantee the security of any data sent over the internet.
International data transfers
- We collect data from wherever users are situated. The information we collect will be transferred to the UK from any other country in which you may be located, and will as such be subject to General Data Protection Regulation rather than the laws of the country in which you are resident.
- We do not transfer personal data collected via our website outside the European Economic Area (unless you have consented; it is necessary to provide the services you have requested; or it is otherwise required or permitted by law).
- You are entitled to know what personal data we hold about you and you may ask us to make any necessary changes to ensure it is accurate and kept up to date or to request deletion in accordance with this section 11. If you wish to do this, please contact us using the contact information provided in section 1 above. There will be no charge for this service; if, however, you log multiple requests, a nominal charge may be applied to cover the administration of those requests. We may also require you to provide us with appropriate identification.
Under the GDPR, you have the right to ‘block’ or request the deletion or removal of personal data to prevent further processing. This right to erasure is also known as ‘the right to be forgotten’. Specific circumstances in which you can request the deletion or removal of personal data include:
- Where the personal data is no longer necessary for the purposes for which it was collected or otherwise processed
- Where you withdraw consent
- When you object to the processing and there is no overriding legitimate interest for continuing the processing
- Where the personal data was unlawfully processed (i.e. otherwise in breach of the GDPR)
- Where the personal data has to be erased in order to comply with a legal obligation
Save where your account has been closed for a breach, personal data associated with any account on our site will be retained for a maximum period of 12 months following an account closure. We reserve the right to access this data during this period for the purposes of fraud prevention and/or to investigate any complaints we may receive.
In cases where a deletion is not possible due to legal, statutory or contractual retention periods, or if it requires disproportionate efforts or prejudices your legitimate interests, the data will be blocked instead of deleted.
- You may also request from us a copy of any of your personal data that has been processed through automated means. This will be provided in a structured, commonly used, and machine-readable format (where technically feasible), which you may then transmit to another controller. You have the right to request that we send this data to another controller on your behalf, but only if it is technically feasible to do so.
- You have the right to withdraw your consent for us to collect, process and store your data at any time. If you wish to withdraw your consent, please confirm this via email to DPO@nullspareroom.co.uk
- If you have a complaint about any aspect of data protection or if you feel your privacy has been breached by us, we would like to hear from you. To help us investigate and resolve your concerns as quickly as possible, please contact us via email to DPO@nullspareroom.co.uk
- You may request that we cease sending you any marketing information at any time by notifying us in writing, following any "unsubscribe" instructions included in any marketing communications which we send to you, or by clicking on "My Account" on the website homepage and updating your account preferences.
- If you are unhappy with the final response you have received from us, you have the right to complain to the supervisory authority: the Information Commissioner’s Office (ICO). You can call the ICO on 030 3123 1113 or visit the ICO website: ico.org.uk.
- You are required to provide personal data in order to enter into a contract with us. Failure to provide this personal data may mean that we are unable to execute the contract, and could result in termination of our provision of services to you.
- If at any time we intend to process your personal data for a reason or in a manner not originally communicated, then prior to performing that processing we will provide you with all relevant information, in accordance with section 11.2 above.