Privacy policy

Handover Halls is a free noticeboard for student halls contract takeovers. This page explains what information we collect, why, and what you can ask us to do with it.

Who we are

Handover Halls is run by an individual (sole trader) based outside the UK, who is responsible for your information (the "data controller"). You can reach us at the contact email we'll publish here before launch.

What we collect

• If you list a room: your email address (to sign you in and send you enquiries), the details you enter about your room, and the photos you upload.
• If you send an enquiry: your name, university, email address and message. These are shared with the tenant who listed the room so they can reply to you.
• If you report a listing: the reason and any note you add.
• If you send feedback: your message, the page you were on, and your email if you choose to give it.
• Basic technical information needed to run the site securely, such as sign-in sessions.

How we use it

• To show listings and pass enquiries between students.
• To sign you in with an emailed link. We never ask for a password.
• To keep the site safe, including reviewing reported listings and removing scams.
• To understand whether the site works, for example how many listings found someone.

We don't sell your information, and we don't use it for advertising.

Our legal basis

• To provide the service you asked for (listing a room, sending an enquiry, signing in): this is needed to perform our agreement with you.
• To keep the site safe and improve it (handling reports, preventing spam, basic usage figures): our legitimate interests in running a safe, useful service.

Cookies and similar storage

We only use storage that's needed for the site to work, such as keeping you signed in. Our host records basic visit statistics, like pages viewed, device type and country, so we can see how the site is used. Our fonts load from Google Fonts, which receives your IP address when a page loads. We don't use advertising cookies, and we don't sell your data.

Who can see what

• Listings are public. Don't include personal details such as your full name or phone number in them.
• A tenant's own email is never shown publicly. It is only seen by people they choose to reply to.
• Enquiry details are visible only to the tenant who listed the room and to us.

How long we keep it

We keep listings, photos and enquiries while your account is active, and delete them on request. Removed listings may be kept for up to 12 months so we can review reports and measure how the site is doing.

Your rights

Under UK data protection law you can ask to see, correct or delete your information, or object to how we use it. Contact us at the contact email we'll publish here before launch. You can also complain to the Information Commissioner's Office (ico.org.uk).

Services we use

The site is built and hosted with Lovable, and its database, photo storage and sign-in run on Supabase. These providers process data on our behalf and may store it outside the UK, for example in the EU or the US. Where that happens, they use the legal safeguards UK law requires, such as standard contractual clauses.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. Significant changes will be highlighted on the site.