letmighty.

Data processing terms

Last updated 9 October 2026 (version terms-2026-10-09). These terms form part of the Terms of service.

Who does what

When you store personal data about other people in LetMighty, such as tenants, occupants, guarantors or contractors, you are the controller of that data and Berkay Kurt trading as LetMighty is your processor. You decide why and how it is used. You are responsible for having a lawful basis to collect and use it, and for giving those people any privacy information they need.

Berkay Kurt trading as LetMighty is the controller of your own account, billing, support and security data, as described in the Privacy notice.

What the processing covers

  • Subject matter and purpose: hosting, storing, organising, displaying, exporting, backing up and deleting the records and documents you add, so you can manage your properties.
  • Duration: while your account is open, then until the data is returned or deleted as set out below.
  • Types of personal data: whatever you choose to record, typically names, contact details, tenancy dates and terms, deposit and payment records, correspondence, certificates and other property documents.
  • People concerned: your tenants, occupants, guarantors, agents, contractors and others named in your records.

Our commitments

  • We process the data only on your documented instructions, which are these terms and your use of the service, including about transfers of the data outside the United Kingdom, unless UK law requires otherwise; if so, we tell you first unless the law forbids it. We tell you if we think an instruction breaks data protection law.
  • Anyone we authorise to process the data is bound by confidentiality.
  • We keep the data secure with appropriate technical and organisational measures, including private storage, access checks on every download, encryption in transit and encrypted backups.
  • We use these sub-processors: Cloudflare (hosting, database, document storage and backups, stored in the European Union). You give general authorisation for sub-processors. We bind each one to data protection terms equivalent to these, remain responsible for them, and tell you before adding or replacing one so you can object; if you object, you can close your account.
  • We help you respond to requests from people exercising their data protection rights, mainly through the export, download, correction and deletion features in the service, and by email.
  • We help you meet your security, breach-notification and impact-assessment duties, taking account of the information available to us. We tell you without undue delay after becoming aware of a personal data breach affecting your data.
  • When the contract ends, you choose whether we return the data to you (as an export of your records and a download of your documents) or delete it. After it is returned or you ask us to delete it, we delete the remaining copies, including backup copies within 35 days, unless UK law requires us to keep them. You can export your records and download your documents at any time before then.
  • We make available the information you reasonably need to show these commitments are met, and we allow and contribute to reasonable audits, including inspections, by you or an auditor you appoint.

Contact

Email support@letmighty.com about anything in these terms.