Privacy Policy

1. Who is responsible for your data

Upsizer is the data controller for the personal information you give us. We process it under the UK GDPR and the Data Protection Act 2018. You can reach us about anything in this policy at privacy@upsizer.co.uk.

2. What we collect and why

To run the service we collect: your account details (name, email, password); your home profile (address, postcode, rent, property and tenancy details, photos, renovation history); the homes you favourite; and the messages you send to matched tenants. Our lawful basis is performance of a contract — this is the information needed to introduce you to other tenants for a mutual exchange — and legitimate interests for keeping the platform safe (for example reviewing reported profiles).

3. Who sees your address (data minimisation)

We deliberately show other tenants as little as possible until there's mutual interest. Before a match, others see only your borough and the first part of your postcode. Your full address is disclosed only to a tenant you have matched with — someone whose home you liked and who liked yours back. We never publish your full address openly, and we never sell your data to anyone.

4. Where your data lives and how long we keep it

Your data is stored with our hosting providers and kept while your account is active. If you delete your account, your profile, home listing, photos, favourites, and messages are removed. We may keep minimal records where the law requires it (for example, evidence connected to a fraud report).

5. Your rights

You can: access your data (download a copy any time from Settings → "Your data"); correct it (edit your profile and home details in the app); erase it (delete your account in Settings, which removes your data as described above); and object or complain. If you're unhappy with how we've handled your data, you have the right to complain to the Information Commissioner's Office (ico.org.uk).

6. Cookies

Upsizer only sets strictly necessary cookies — the ones that keep you signed in and protect forms from abuse. We use no analytics, advertising, or tracking cookies. If that ever changes, we'll ask for your consent first, as required by PECR.

7. Special category data

We don't ask for, and you shouldn't include, sensitive information such as health or disability details in your bio or messages. If a future feature needs anything like this (for example medical-priority moves), we'll ask for your explicit consent separately and protect it with extra safeguards.