Last updated: August 2026
LeaseIntel is operated by Geoff Money Ltd, a company registered in England and Wales (company number 16677970), with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom.
Geoff Money Ltd is the controller of the personal information described in this policy. LeaseIntel is independent and is not affiliated with or endorsed by HM Courts & Tribunals Service, the First-tier Tribunal (Property Chamber), GOV.UK or the Leasehold Advisory Service.
Contact: leaseintel@geoff.money. You can also use our Corrections & Privacy Requests page.
This policy explains how we handle personal information when you:
The paid report and document-upload service is currently unavailable. Sections describing those features explain how information will be handled if they are re-enabled.
Depending on how you interact with LeaseIntel, we may process:
Published tribunal decisions may contain names, property addresses, case references, decision dates, lease terms, premiums, other financial figures and information about parties or representatives. LeaseIntel does not need all of that information for routine research and benchmarking.
Our routine research layer is designed to use a minimised record. It excludes exact dwelling addresses, full postcodes, names, free text and address-bearing source links. It uses less precise location information, such as a road name or broader area and an outward postcode code, only where needed for comparison.
Limited exact provenance information may be retained separately so that we can verify a result, correct it, respond to a rights request, honour a suppression, or demonstrate the source of a record. That restricted information is not available to the public-facing application and access is limited to authorised service operations.
We obtain information:
Information being publicly available does not remove our data-protection responsibilities. See the Sources & Attribution page.
We identify a lawful basis for each purpose. The bases below refer to Article 6(1) of the UK GDPR.
| Purpose | Information | Lawful basis |
|---|---|---|
| Respond to a request before purchase; generate and deliver a report; provide support connected with that report | Contact information, benchmark inputs, upload and report information | Contract — Article 6(1)(b): necessary to take requested steps before a contract or perform it |
| Process a payment and administer an order | Contact information, payment status and transaction identifiers | Contract — Article 6(1)(b); and legal obligation — Article 6(1)(c) for required accounting or tax records |
| Maintain and improve a minimised research and benchmarking dataset derived from published tribunal outcomes | Minimised tribunal-source information and restricted provenance | Legitimate interests — Article 6(1)(f) |
| Verify sources, correct records, honour objections or suppressions, prevent a removed record being republished and defend the integrity of the dataset | Restricted provenance and a minimal suppression identifier | Legitimate interests — Article 6(1)(f); where a binding duty applies, legal obligation — Article 6(1)(c) |
| Secure the service, prevent fraud or misuse, diagnose faults and maintain availability | Technical, security and limited account or transaction information | Legitimate interests — Article 6(1)(f); in some cases legal obligation — Article 6(1)(c) |
| Answer general enquiries and manage complaints | Contact and correspondence information | Legitimate interests — Article 6(1)(f); or contract — Article 6(1)(b) where the enquiry concerns an order |
| Comply with a binding legal request or retain records required by law | Relevant records | Legal obligation — Article 6(1)(c) |
| Use Google Analytics 4, Microsoft Clarity or another non-essential storage or access technology | Optional analytics information and device identifiers | Consent — Article 6(1)(a), together with consent under PECR where required |
We do not use consent as the basis for processing needed to perform a contract.
Our interests are to provide evidence-based public research and benchmarking, preserve the auditability of published outcomes, improve the accuracy of comparisons, correct errors and protect people from re-publication after a valid suppression.
We use Article 6(1)(f) only where we have assessed that the processing is necessary and that those interests are not overridden by a person's rights and interests. Safeguards include data minimisation, separating routine data from restricted provenance, access controls, no routine public access to exact provenance, restrictions on search-engine indexing, source correction checks, retention reviews and an accessible objection and suppression process.
You have the right to object to processing based on legitimate interests. See section 14.
Special-category information includes information revealing or concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or identifying biometric data, sex life or sexual orientation.
LeaseIntel's service and research dataset are not intended to collect or use special-category information. Please redact it from any document before submitting it. We do not use it for benchmarking, profiling or report comparison.
If special-category information appears incidentally in a submitted document or published decision, we isolate it from the benchmarking process and delete, redact or suppress it as soon as reasonably practicable. Public availability does not, by itself, provide LeaseIntel with an Article 9 condition.
We will retain or otherwise process special-category information only where an Article 6 lawful basis applies and a specific Article 9 condition applies and has been documented before the processing continues.
The only condition likely to be relevant to an exceptional incident is Article 9(2)(f), where the limited processing is strictly necessary to establish, exercise or defend a legal claim. If we ever propose to rely on explicit consent under Article 9(2)(a), we will obtain separate, specific and explicit consent before processing; it will not be bundled into general terms. If no valid condition applies, we will not retain or use the information.
LeaseIntel is not intended to collect or use information about criminal allegations, investigations, proceedings, convictions or related security measures. Please do not submit it.
If criminal-offence information is encountered incidentally, we exclude and delete or suppress it unless processing is authorised by UK law and we have documented both an Article 6 basis and the applicable legal condition and safeguards. Geoff Money Ltd does not claim official authority for this purpose.
When the upload and paid-report service is available:
AI output can be wrong. Important fields and results should be checked, and the report is not legal, valuation, surveying or financial advice.
LeaseIntel does not make decisions based solely on automated processing that produce legal or similarly significant effects on a person. Reports are informational comparisons and should be assessed by the user and, where appropriate, a qualified professional.
We use service providers only for the functions needed to operate LeaseIntel. Depending on the feature in use, these may include:
| Provider or category | Function |
|---|---|
| Lovable and Cloudflare | Website and edge infrastructure |
| Railway | Backend application infrastructure |
| Supabase | Hosted database and related infrastructure |
| Stripe | Payment processing when paid checkout is available |
| Anthropic | AI-assisted document processing when that feature is available |
| Resend and SendGrid | Transactional email and service communications, where enabled |
| Google Analytics 4 and Microsoft Clarity | Optional analytics, only under the choices described in our Cookie Policy |
Providers act under applicable contractual and data-protection terms. We require processors to handle information only on documented instructions, protect it and assist with applicable data-protection obligations.
We may also disclose limited information to professional advisers, insurers, auditors, courts, regulators or law-enforcement bodies where reasonably necessary and lawful. We do not sell personal information.
Some providers or their subprocessors may process information outside the United Kingdom. Before making a restricted transfer, we use an applicable UK adequacy regulation, an appropriate safeguard such as the UK International Data Transfer Agreement or UK Addendum, or a specific statutory exception. Where an appropriate safeguard is used, we carry out the required transfer-risk assessment or data-protection test and apply additional measures where needed.
You may ask us for more information about the safeguard relevant to your information.
We keep information only for as long as necessary for the stated purpose. The following periods apply when the relevant feature is operating, unless a shorter period is appropriate or a longer period is required by law, a regulatory obligation, an active dispute, fraud prevention or a legal hold.
| Record | Normal retention |
|---|---|
| Raw uploaded-document bytes | Transient processing only; discarded after extraction. Any exceptional temporary copy is deleted within 24 hours |
| Submitted inputs, extracted fields and generated report record | Up to 30 days after report delivery, unless you delete it sooner or a dispute or legal hold applies |
| Full payment-card details | Not stored by LeaseIntel |
| Payment, tax and accounting records | Normally 6 years where required for company, tax or accounting purposes |
| General enquiries and support correspondence | 12 months after closure; up to 6 years only where needed for a contract, complaint or legal claim |
| Routine technical and security logs | Normally 90 days; longer only for a documented incident, investigation or legal requirement |
| Cookie choice stored on your device | Until you change it or clear browser storage |
| Evidence of consent, where kept server-side | Up to 24 months after withdrawal or the last relevant interaction, unless needed for a live complaint |
| Minimised tribunal research data | While needed for the research corpus, subject to a documented review at least annually |
| Restricted source provenance | Access-restricted and reviewed for necessity at least every 12 months |
| Minimal suppression identifier | While the related corpus or publication operates, so a removed record is not inadvertently republished |
Backups are not used as a routine archive. They expire under controlled provider rotation. If a backup is restored, applicable deletion and suppression instructions are re-applied.
We use proportionate technical and organisational measures, including access controls, encryption in transit, restricted service credentials, separation of routine research data from precise provenance, monitoring, testing and controlled change processes.
No internet service is completely secure. If we identify a personal-data breach, we assess it, take steps to contain it and notify the ICO and affected people where the law requires.
This section is directed particularly to people whose information appears in a published tribunal source and was not collected from them directly.
The controller, purposes, categories, sources, lawful basis, recipients, retention criteria and rights applicable to that information are set out in this policy. The source publisher's record remains the authoritative version. LeaseIntel's routine layer is minimised, while restricted provenance is kept only for the limited purposes described above.
Where Article 14 requires direct notification, we provide it within the required period unless a specific statutory exception applies. We do not assume that publication makes Article 14 inapplicable. If we rely on an exception such as disproportionate effort, we document that assessment and use proportionate safeguards, including this public notice, minimisation, restricted access, correction and suppression routes, and indexing controls.
If a decision has been corrected, withdrawn, replaced or anonymised at source, please tell us via the Corrections & Privacy Requests page. We will verify the change and update, restrict or remove the corresponding LeaseIntel record as appropriate.
Depending on the circumstances, you may have the right to:
To exercise a right, email leaseintel@geoff.money or use Corrections & Privacy Requests. Please identify the relevant page, report or tribunal record where possible. We may need proportionate information to verify identity and avoid disclosing information to the wrong person.
We normally respond to a valid request within one month. The law allows an extension in some complex cases; if that applies, we will tell you.
Where you object to our tribunal-research processing, we will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims. We may retain only a minimal suppression identifier where necessary to ensure removed information is not reintroduced.
You can complain to the ICO at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address the issue first, but you do not have to contact us before approaching the ICO.
LeaseIntel is not directed at children and its report service is intended for people aged 18 or over. If you believe a child has submitted personal information, please contact us so we can investigate and remove it where appropriate.
Our use of cookies, local storage, scripts and similar technologies is explained in our Cookie Policy. Non-essential analytics is not loaded before the required choice has been made. You can withdraw an analytics choice through “Cookie settings”.
We may update this policy when our processing, providers or legal obligations change. We will show the current version and date on this page and give additional notice where a change materially affects how we use personal information.
Geoff Money Ltd
128 City Road
London EC1V 2NX
United Kingdom
Email: leaseintel@geoff.money
Privacy requests: leaseintel.co.uk/corrections