Privacy Policy

Effective Date: 23rd July 2025

Lanten (“we”, “us”, or “our”) is committed to protecting the privacy of individuals who visit our website, use our services, or otherwise interact with us. This Privacy Policy explains how we collect, use, share, and protect personal information, and outlines your rights in relation to that information under the UK General Data Protection Regulation (“UK GDPR”).

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

1. Scope

This Privacy Policy applies to:

• Visitors to our website (https://www.lanten.ai)

• Users of our product and platform

• Individuals whose data is processed by our customers via Lanten’s services (e.g., tenants)

• Individuals who contact or interact with us (e.g., support, enquiries)

It does not apply to third-party websites or services that we do not control.

2. Data We Collect

We collect the following types of personal data, depending on how you interact with us:

a. Customer & User Data

• Full name

• Email address

• Business name

• Phone number

• Password (hashed)

• Billing details and transaction history (via Stripe)

• WhatsApp account ID (used for integration)

• Customer support interactions

b. Tenant Data (Processed on behalf of Customers)

When our customers use Lanten to manage communication with their tenants, we
process tenant data as a data processor. This includes:

• Full name

• Phone number (linked to WhatsApp)

• Message content

• Rental address

• Lease and payment information

• Maintenance requests and history

Customers are responsible for ensuring they have a lawful basis for sharing and processing this data under applicable data protection laws.

c. Website & Usage Data

• IP address

• Device type

• Browser type and version

• Operating system

• Pages visited

• Time spent on pages

• Referring website

• Cookie identifiers

d. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve our website and services. Cookies may be used for:

• Analytics and performance tracking

• Session management

• Security and fraud prevention

• Marketing attribution

You can manage cookie preferences via your browser settings.

3. How We Use Personal Data

We use your personal data for the following purposes:

• To provide, maintain, and improve our services

• To process and manage subscriptions and payments

• To provide customer support and respond to enquiries

• To ensure system security, integrity, and fraud prevention

• To send essential communications (e.g. service updates)

• To comply with legal and regulatory obligations

• To analyse usage patterns and improve user experience

• To conduct product research and development

• To manage opt-in marketing communications (with consent)

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal grounds to process personal data:

• Performance of a contract: to deliver and maintain our services

• Legitimate interests: for business operations, service improvement, and fraud prevention (unless overridden by your rights)

• Consent: for optional features like marketing emails or analytics cookies

• Legal obligations: where required by law or court order

Where we rely on consent, you can withdraw it at any time by contacting us at support@lanten.ai.

5. How We Share Your Data

We may share your personal data with the following categories of recipients:

• Service providers (e.g., Stripe, hosting providers, analytics platforms)

• Sub-processors used to support Lanten’s operations

• Professional advisors (e.g., lawyers, auditors)

• Authorities or regulators where required by law

• Prospective buyers in case of business sale or merger (subject to confidentiality)

We ensure all third parties we work with uphold strict data protection standards and only process data according to our instructions.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including:

• Active customer accounts: for the duration of the service relationship

• Inactive accounts: retained for up to 6 years for tax, legal or audit purposes

• Tenant communications: retained as instructed by our customers

• Website logs and analytics data: typically retained for up to 12 months

• Cookie data: subject to browser or device settings

7. International Data Transfers

Lanten may process data using third-party services based outside the UK. Whenever we transfer data internationally, we implement appropriate safeguards such as:

• UK-approved Standard Contractual Clauses (SCCs)

• The UK International Data Transfer Agreement (IDTA)

• Confirmed adequacy decisions from the UK government

You may request a copy of relevant safeguards by contacting us.

8. Data Security

We take data protection seriously and apply a range of technical and organisational measures to protect your data, including:

• HTTPS encryption for all data in transit

• Role-based access controls and audit logs

• Secure cloud infrastructure

• Regular security audits and vulnerability scanning

• Data backups and business continuity planning

While no system is completely secure, we actively work to mitigate risks and prevent unauthorised access or disclosure.

9. Your Rights

Under the UK GDPR, you have the following rights:

• Right of access – request a copy of your personal data

• Right to rectification – request corrections to inaccurate or incomplete data

• Right to erasure – request deletion of your data (in certain circumstances)

• Right to restrict processing – request limitation of how your data is used

• Right to data portability – request your data in a structured, machine-readable format

• Right to object – object to processing based on our legitimate interests

• Right to withdraw consent – for processing based on consent (e.g. marketing)

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

https://ico.org.uk/make-a-complaint

To exercise your rights, contact us at support@lanten.ai. We will respond within 30 days.

10. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal data from children. If we become aware of such data being processed, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our services, or data handling practices. Any changes will be posted on this page with a revised effective date. Where required, we will notify users via email or platform notifications.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Email: support@lanten.ai