DPA

Data Processing Addendum (DPA)

This addendum sets out controller/processor responsibilities for personal data processed through SmartTenant.

Last updated: 2 April 2026

Legal owner

Smart Property Software Ltd

SmartTenant is a platform owned and operated by Smart Property Software Ltd.

Company number 17126256.

Contact: enquiries@smarttenant.co.uk

ICO readiness

Data protection confidence

SmartTenant is preparing its ICO registration details for launch. Any ICO registration wording or logo treatment is intentionally disabled until registration is completed and confirmed.

ICO registration wording and logo placement are placeholders during development and will be updated before go-live.

1. Parties and roles

For customer tenancy operations, the customer (landlord/business user) is the controller and Smart Property Software Ltd, trading through SmartTenant, is the processor. Smart Property Software Ltd, trading through SmartTenant, acts as processor for customer tenancy and operational data entered by landlords and other customer organisations. Each party remains responsible for compliance with applicable UK data protection law.

2. Scope

Smart Property Software Ltd processes personal data through SmartTenant only to provide platform services, maintain security, and deliver customer-configured workflows and integrations.

3. Processor obligations

Process personal data only on documented customer instructions.
Ensure confidentiality obligations apply to authorised personnel.
Implement appropriate technical and organisational security measures.
Maintain records and audit evidence for processing activities.
Assist controller with rights requests and compliance duties where required.

4. Subprocessors

SmartTenant may engage subprocessors for infrastructure and service delivery. SmartTenant remains responsible for subprocessor performance under written terms. Current categories and processors are listed in the Subprocessor Register.

5. International transfers

Where a transfer outside the UK is required, SmartTenant applies contractual safeguards (including UK IDTA or UK addendum to SCCs) and transfer-risk controls appropriate to the processing.

6. Security incidents and breach support

SmartTenant will notify affected customers without undue delay after becoming aware of a personal data breach affecting customer data, and will provide available details to support statutory notifications.

7. Retention, return, and deletion

On termination or customer instruction, personal data is returned or deleted unless retention is required by law. Deletion schedules and controls are documented in the Data Retention and Deletion Standard.

8. Audit and assurance

SmartTenant provides reasonable information to demonstrate compliance and supports proportionate audit requests subject to confidentiality, security, and operational safeguards.

9. Contracting

For a signed DPA schedule for your organisation, contact enquiries@smarttenant.co.uk.