Register of Processing Activities

GDPR Article 30 — Record of personal data processing activities.

IDPurposeData CategoriesLegal BasisRetentionRecipients
PA-001

Service Delivery

Core portal operations, user account management, and access to property information.

Name, Email, Profile picture, Agency associationContract (Art. 6(1)(b))Until account deletionVercel (hosting), Neon (database)
PA-002

Property Data Display

Retrieving and displaying tenancy details, financial statements, and property information from the agency's management system.

Tenancy details, Rent schedules, Financial statements, Property addressesContract (Art. 6(1)(b))Not stored — sourced live from AgentOSAgentOS (letmc.com)
PA-003

Maintenance Management

Reporting and tracking maintenance issues, communicating with contractors.

Job descriptions, Status updates, Contractor detailsContract (Art. 6(1)(b))Not stored — sourced live from AgentOSAgentOS (letmc.com)
PA-004

Document Management

Viewing and uploading property-related documents (agreements, inspection reports, etc.).

Document metadata, File contentsContract (Art. 6(1)(b))Until document deleted or account closedAgentOS (letmc.com)
PA-005

Messaging

Facilitating communication between portal users and their property agents.

Message content, Sender/recipient identifiers, TimestampsContract (Art. 6(1)(b))Not stored — sourced live from AgentOSAgentOS (letmc.com)
PA-006

Transactional Email

Sending account notifications, password resets, and system alerts.

Email, NameContract (Art. 6(1)(b))30 days (email logs)Resend
PA-007

Authentication

Verifying user identity via AWS Cognito OIDC provider.

Email, Name, Authentication tokensContract (Art. 6(1)(b))Session durationAWS Cognito
PA-008

Analytics

Tracking usage patterns to improve the service. Only with user consent.

Usage events, Page views, Feature interactionsConsent (Art. 6(1)(a))90 daysNone
PA-009

Security & Audit

Logging state-changing operations for security monitoring and compliance.

User ID, Action, IP address, TimestampLegitimate Interest (Art. 6(1)(f))90 daysNone

Data Controller

myProp — a self-service property portal operated on behalf of participating letting and estate agencies.

For data protection enquiries, please contact your letting or estate agency directly.

Privacy PolicyTerms of ServiceBack to Home