Version 1.2 · Effective 1 October 2026
Letfold (formerly Estate-HQ) is a trading name of ONE CONNECT LONDON LTD. ONE CONNECT LONDON LTD is registered in England and Wales under company number 16952075. Registered office: 77 Auriel Avenue, Dagenham, England, RM10 8BU, United Kingdom. ICO registration reference: ZC258914. Not VAT registered.
Until 28 September 2026 the service was operated by UNIVERSALHOMEANDTECH LTD (company 16534780); from 29 September 2026 it is operated by ONE CONNECT LONDON LTD.
This page lists the sub-processors that ONE CONNECT LONDON LTD (trading as Letfold) uses to deliver the Letfold platform. Under the Data Processing Agreement (DPA), we are required to inform subscribers of all sub-processors and to give 30 days notice before engaging a new one.
A sub-processor is any third party that processes personal data on our behalf in connection with the Letfold service. All sub-processors are bound by data processing terms and appropriate safeguards under UK data protection law.
| Provider | Role | What we send them | Location | Safeguard |
|---|---|---|---|---|
| Contabo GmbH | Platform hosting, MySQL database, file storage | All customer data entered into Letfold (the platform runs entirely on their servers) | Corporate entity: Germany. Data centre: European Economic Area. | UK adequacy regulations for the EEA; Contabo data processing agreement |
| Hostinger International Ltd | Mailbox for our previous address, [email protected] | Messages people send to our previous email address | Corporate entity: Lithuania (EU). | Hostinger data processing agreement |
| Scaleway SAS | Email delivery for platform emails (Transactional Email), and hosting of our newsletter server | Service emails sent by the platform (recipient address, subject and message); for newsletters, the names and email addresses of people who have subscribed | Corporate entity: France. Data centre: European Economic Area (Paris). | UK adequacy regulations for the EEA; Scaleway data processing agreement |
| Revolut Ltd | Card payments made before PayPal, and refunds of those payments | Agency name, billing email, invoice amount and reference (no card details — Revolut handles those directly with the cardholder) | United Kingdom (London) | UK-based, FCA-regulated, ICO registered |
| PayPal UK Ltd | Subscription payment processing, for customers who choose to pay with PayPal | Agency name, billing email, invoice amount and reference (no card or bank details — PayPal handles those directly with the payer) | United Kingdom | UK-based; authorised by the FCA as an electronic money institution (FRN 994790) |
| DeepSeek (Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co.) | Internal AI Operations Agent — analyses anonymised system-health metrics to surface operational alerts to our admin team | Aggregated system metrics: counts of signups, refund counts, failed-login counts, error-log line counts. Individual signup events are sent with agency UUIDs only — no email addresses, names or other directly-identifying personal data. See "Data minimisation in AI processing" below. | People's Republic of China | UK IDTA in place; data minimisation (UUIDs not personal data); no Tenant Passport, landlord or contractor data ever transmitted |
| Google LLC (Gemini / Imagen 4) | Marketing image generation only | Text prompts only (e.g. "a photo of UK terraced houses"). No customer data of any kind. | United States | UK IDTA / EU SCC + UK Addendum under Google's standard terms |
| Cloudflare, Inc. | DNS, TLS termination, DDoS mitigation, CDN for static marketing assets, and encrypted off-site backups (R2) | All traffic to letfold.com passes through Cloudflare's edge. Application data is encrypted in transit. Cloudflare may temporarily hold request metadata (IP, URL, user agent) for security purposes. Nightly backups are encrypted before upload, so Cloudflare cannot read them. | United States (with EU/UK edge nodes); backups stored in Western Europe | UK IDTA via Cloudflare's standard DPA |
We will give all active subscribers at least 30 days written notice by email before engaging a new sub-processor or making a material change to an existing one. If you object to a new sub-processor, you may terminate your subscription within that 30-day period and receive a pro-rata refund of any unused annual subscription. Continued use after the effective date constitutes acceptance.
Sub-processor queries, DPA enquiries, or requests for the full executed IDTA / DPA documents with any sub-processor: [email protected].
