Privacy policy
1. Introduction
Welcome to our PrivacyPolicy (“policy”). We are an information technology company. Our core business relates to enterprise software systems development (our “services”). We respect your privacy and take the protection of personal information very seriously.
2. Who are we?
Where we use the words “we”, “our”, or “us” we mean either,
- Reapit Ltd. (Company number:03483017), a private company limited by shares, registered in England and Wales and registered office address at 67 – 74 Saffron Hill, EC1N 8QX London, United Kingdom (Reapit);
- PayProp Ltd. (Company number:05405100), a private company limited by shares, registered in England and Wales and registered office address at 44 London Road, Sevenoaks, United Kingdom (PayProp); or
- both parties where the context refers to the parties operating as joint controllers.
Both parties are part of the Reapit Group (RPL Parent Ltd – Company number: 15303707). The company that is responsible for your personal information will be the company that is named on the website you access, named in any terms and conditions, or if there are no terms just yet, the company you have engaged with for services, or named in any messages sent to you.
For the purposes of data protection law and for the vast majority of personal information processing, we are a data processor. We are a data processor with respect to the personal information our clients (“clients”) capture on our platform where we are acting upon our clients’ instructions.However, in certain circumstances we also act as a data controller. This policy addresses personal information processing we carry out in our capacity as a data controller. This policy describes the way that we, as a data controller, collect, store, use, and protect information that can be associated with you or another specific person and can be used to identify you or that person (“personal information”).
3. Who does this Policy apply to?
We operate several websites including www.payprop.com/uk and www.reapit.com. This policy applies to you if you are someone who:
- browses our websites;
- is mentioned on our website;
- submits an inquiry via our website; or
- requests certain communications via our website.
This policy does not apply to you if you are a job applicant, employee, agent or contractor. The fair, lawful and secure processing of the personal information of these types of data subjects is governed by other company policies outside the scope of this policy.
4. What does this Policy cover?
This policy applies to the services we offer through our websites and applies to personal information we process in pursuit of our own purposes which include our marketing and business development efforts. This policy also applies to you, as a user of our services, if we are using mechanisms to track your use of the services to enhance user experience and product improvement. We are processing this personal information under the lawful basis of legitimate interest, and you may opt out of this tracking within our platform.
This policy does not apply to the personal information that our clients control and process via our services. This policy does not apply to services other companies or individuals offer. This policy does not cover the activities performed by other companies and organisations who advertise our services or any third party operating any website to which our websites may contain a link.
5. Acknowledge
By submitting personal information to us, you acknowledge and accept the practices described in this policy. We will endeavour to bring this policy to your attention every time we ask for your personal information. We will seek your specific consent whenever this is required.
It will be very difficult and, in some cases, even impossible for us to provide you services if you refuse to allow us to process your information. If you do not accept the practices described in this policy, or cannot form a legally binding contract, you must not provide us with any personal information.
If you have provided us with other information in addition to those available on your account, you have the right to withdraw your consent to the processing of such additional information at any time by contacting the data protection officer at dpo@reapit.com or dpo@payprop.co.uk, depending on the entity that you need to engage with. Where Reapit and PayProp act as joint controllers, dpo@reapit.com is our joint controller contact point but you may contact either of us.
Should you withdraw your consent to the processing of your information, you are hereby informed that such withdrawal may prevent us from providing all or certain aspects of our available services. You should also be aware that where we process your information under another lawful basis than consent, for example under contract or legal obligation, a request to delete your information may not be feasible or even allowed.
6. What information are we processing and why?
Non-personal information
Like most website operators, we collect non-personal information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site and the date and time of each visitor request, from our website visitors.
Our purposes in collecting such non-personal information are to optimise your experience of our websites and render them more user-friendly, better understand how you use our websites and analyse your behaviour for statistical purposes, for example by monitoring the most popular service accounts on our websites. From time to time, we may release non-personal information in the aggregate, e.g., by publishing a report on trends in the usage of our websites. We may display this information publicly or provide it to third parties.
Personal information
You may choose to interact with us in ways that require us to gather your personal information. We do not collect or process more personal information than is necessary for us to fulfil the purposes for which we collected and processed the personal information. The amount and type of personal information that we gather depends on the nature of the interaction, as detailed below.
The following table summarises the types of data processing activities we undertake in relation to personal information subject to this policy:
Information we process and where we get it from | Purposes for processing | Legal basis for processing |
|---|---|---|
Publicly available information. | To contact businesses to enquire whether they are interested in using our Services. | Our legitimate interests, namely the pursuit of our own marketing and business development efforts. |
Any information you provide to us, such as names, contact details, occupation, purchase history, etc. |
|
|
Information you generate when you visit our website, for example your Internet Protocol Address (IP Address). |
| Our legitimate interests, namely monitoring and improving our website and services, and your consent whenever required. |
Information you provide to us through our joint controllers. |
| Our legitimate interests, namely the pursuit of our own marketing and business development efforts, or your consent whenever required. |
7. Who we share your information with and why
Reapit and PayProp act as joint controllers in relation to one another. We process your personal information jointly for the purposes mentioned in the table above relating to information provided through our joint controllers. We may collect your personal information, as well as your consent, on either one of our respective websites.
Other parties we share your personal information with are listed in the table below.
Third party | Purposes for processing | Legal basis for processing |
|---|---|---|
Companies within the Reapit Group (including affiliates and ultimate beneficial owners). | To facilitate the provision and promotion of the Services and to monitor business development. | The performance or negotiation of the contractual relationship between us and our clients, our legitimate interests, namely the pursuit of our own marketing and business development efforts, and your consent whenever required. |
Suppliers, such as CRM systems and marketing agencies. | To facilitate the provision and promotion of the Services. | The performance or negotiation of the contractual relationship between us and our clients and our legitimate interests, namely the pursuit of our own marketing and business development efforts. |
Professional advisors, such as accountants and solicitors. | Only when necessary, limited to what is necessary. | Our legitimate interests, namely the proper administration of our business, or fulfilling our legal obligations or in relation to enforcing or defending legal claims. |
Competent authorities, such as regulatory authorities, the Police and HMRC. | Only when compelled to and/or when under an obligation to do so. | Compliance with legal obligations. |
We will not rent or sell personal information to anyone and will ask your consent before using personal information for a purpose other than those set out in this Privacy Policy, subject to applicable law.
8. Only essential staff have access
Your personal information will be made available only to the members of our staff who need to have access to such personal information to perform the purposes for which personal information have been provided. Such members of our staff have been instructed with respect to and have committed to comply with the contractual and legal data protection obligations.
9. Your rights
You have the right to access andupdate your personal information at any time through your account on ourwebsites.
In addition and to the extent applicable, you have the right to:
- request to have access to your personal information and obtain information in relation thereto (i.e. purposes of the processing, categories of personal information concerned, recipients to whom personal information have been or will be disclosed, etc.);
- request to rectify your personal information;
- request erasure your personal information, unless retention of personal information is required by any contractual terms, applicable law or competent court or authority;
- withdraw your consent to processing;
- if necessary, lodge a complaint with a supervisory authority;
- object to or restrict the processing of your personal information; and
- receive, or request us to transmit to another designated person or entity, your personal information in a structured, commonly used and machine-readable format.
To exercise any of these rights, please contact either dpo@reapit.com or dpo@payprop.co.uk depending on the entity relevant to you and your request or rights you wish to exercise. If you wish to exercise any of these rights in relation to Reapit and PayProp’s joint processing, our joint controller contact point is dpo@reapit.com.
We are committed to guaranteeing the statutory rights of individuals. If you send us a request regarding your rights under data protection law we will respond within 30 calendar days of receipt and, where possible, address your request within such time. Where necessary, this period may be extended by up to a further 60 days.
If requests are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve our right to either charge a reasonable fee taking into account the request or refuse to act on the request. Without prejudice of non-personal information, we may request the provision of additional information to confirm the identity of the data subject if we have reasonable doubts concerning the identity of the person making the request.
We do not engage in profiling which is capable of producing legal or other significant effects for individual data subjects.Detailed information on the content and the means to exercise your rights is provided by the United Kingdom’s Information Commissioner’s Office, available here.
10. Your obligations
You must ensure that information you provide to us is:
- correct;
- accurate;
- current;
- truthful; and
- compliant with any applicable laws.
In particular, since we will use e-mail and telephone communications with you, you are required to notify us of any modification of your e-mail address or contact number. Alternatively, you can directly update your contact profile on your account.
Insofar as you provide us with personal information about third parties, you represent and warrant that you have the right to share this personal information and where necessary have obtained sufficient informed consent from such persons and provided them with all necessary information, as may be required by applicable law or agreement, for us to store and process any such personal information.
11. How long do we store your information?
We operate an internal Data Retention Policy. We will keep general and personal information only as long as it is necessary for the purposes for which they have been provided, unless retention of information is required by any applicable law or competent court or authority or for statistical or archiving purposes.
12. Security measures
We operate an internal Information Security Policy. We have taken and will maintain technical and organisational security measures to ensure our own and our suppliers’ information security standards are appropriate to the risks associated with the personal information processing we undertake. In particular, to protect personal information against unauthorised or unlawful processing, accidental loss, destruction or damage and ensure the ongoing confidentiality, integrity, availability of personal information and resilience of the systems and services used for processing of personal information. Our InformationSecurity Policy is available for review upon request.
13. International transfers
We work solely with world-class suppliers, some of whom have branches outside the UK and European Economic Area (‘EEA’).
To accomplish the purposes mentioned in this Policy(in order to provide or develop our Services or where one of the other legitimate interests identified above applies) we may need to disclose your personal information to other entities, including to entities located in countries whose data protection laws may be different from those in your country of residence. You hereby agree and give your consent to us to transfer and communicate your personal information as follows:
- Transfers to affiliated companies: We may disclose your information to our affiliated companies, whose offices are located in theUSA, Canada, UK, Ireland, Switzerland, Denmark, South Africa, Australia, andNew Zealand.
- Transfers to third parties: We may disclose your information to our third-party contractors that need to have access to such information in order to process it on our behalf or to provide services available on our websites. Third-party contractors have executed agreements with us requiring, in particular, that they abide by the rules of the applicable data protection laws, in particular the EU General Data Protection Regulation 2016/679, and comply with any instruction they receive from us, as data controller or processor, regarding personal information.
Any transfers of your personal information outside the UK and EEA take place subject to appropriate safeguards as provided in data protection law. These safeguards are intended to secure your rights as a data subject with respect to any relevant non-UK or EEA domiciled entities. We assume responsibility for the security of personal information that is accessible by our overseas affiliates.
14. Newsletter
If you are a registered user of a website of ours and have supplied your e-mail address, we may occasionally send you an e-mail to tell you about new features, solicit your feedback or just keep you up to date with what's going on with PayProp and Reapit and their services. We primarily use uk.payprop.com or www.reapit.com to communicate this type of information, and we expect to keep this type of e-mail to a minimum.
You may opt-out from receiving our e-mails by selecting the unsubscribe option available at the bottom of all e-mail communications. Please also note that if you do opt-out of receiving messages from us, we may still send you important administrative messages and you cannot opt-out from receiving such administrative messages.
15. Cookies
For more information on how we deal with cookies, please refer to our CookiePolicy.
16. Ads
This Policy does not regulate the use of cookies by any advertisers. We nonetheless inform you that ads appearing on any of our websites may be delivered to users by advertising partners, who may set cookies. These cookies allow the ad server to recognise your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you.
17. Changes
We reserve the right to amend this policy from time to time. You will be informed of any material changes without delay. We encourage you to check this page frequently for any changes to the PrivacyPolicy. If you have a user account, you should also check your account dashboard for alerts to these changes. Your continued use of our websites after any non-significant change to this Policy will constitute your acceptance of such change.
We reserve the right, in the event that we buy or sell all or part of our business or assets, to disclose personal information held by us to the prospective seller or buyer of such business or assets.
18. Contact
In relation to any queries about this Policy or any other data protection matters, please contact dpo@reapit.com. or dpo@payprop.co.uk, or by visiting the applicable website and clicking “Contact us” to submit your inquiry.
If you have any concerns about our use of your personal information,you can make a complaint using the details above. If you remain unhappy with howwe’ve used your information after raising a complaint with us, you can alsocomplain to the ICO.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated: 5 June 2025