RENTLY HK LIMITED

PRIVACY POLICY

Rently HK Limited  |  Company No. 80229163  |  Last updated: June 2026

This Privacy Policy applies to personal data collected through rently.hk and the Rently mobile application.

1. Who We Are

Rently HK Limited (Company No. 80229163) is the data user responsible for your personal data under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (the “PDPO”). We operate a tenancy management platform that helps Hong Kong tenants manage rent payments and access optional tenancy-related add-on products.

Contact: support@rently.hk

2. What Personal Data We Collect

2.1 Data You Provide

When you create an account and use our platform, we collect:

• Identity data: full legal name, Hong Kong Identity Card or passport number, nationality and residency status
• Contact data: email address, phone number, residential address
• Tenancy data: monthly rent amount, lease start and end dates, lease status, landlord name, landlord bank account details, and a copy of your Tenancy Agreement
• Payment data: autopay (Direct Debit Authorisation) and FPS bank authorisation details. Credit and debit card payments are processed directly by our third-party payment processors — Rently does not store your card number or card details.
• Product-specific data: for Lower Move-In Costs, deposit amount and deposit due date; for Delay Rent Payments, your chosen repayment date

2.2 Data from Third Parties

We may receive data about you from:

• Authorised verification sources: information about your identity, tenancy, and financial standing obtained and verified from authorised sources, and other authorised identity verification sources, with your consent during onboarding or identity verification
• Credit bureaus: credit assessment data retrieved as part of the approval process for Lower Move-In Costs and Delay Rent Payments
• HeyMax: confirmation of your HeyMax account and rewards accrual data, where you have activated Earn Rewards on Rent

2.3 Data Collected Automatically

When you use our platform, we automatically collect:

• Device data: device type, operating system, browser type, IP address
• Usage data: pages visited, features used, timestamps, session data
• Application state data: progress through the onboarding flow, saved application state for exit-and-resume functionality

3. How We Use Your Data

We process your personal data for the following purposes:

• Account creation and management: to verify your identity, create your account, and maintain your account in working order
• Service delivery: to process rent payments and reimbursements, manage your active add-on products, communicate with your Landlord on your behalf, and generate payment schedules and invoices
• Credit assessment: to assess your eligibility for Lower Move-In Costs and Delay Rent Payments, including by obtaining a credit report from a credit bureau
• Rewards administration: to calculate and report your rewards accrual to HeyMax where you have activated Earn Rewards on Rent
• Communications: to send you payment confirmations, reminders, account notifications, and updates to our terms
• Customer support: to respond to your enquiries and resolve disputes
• Fraud prevention and security: to detect and prevent fraudulent activity, identity misrepresentation, and unauthorised access
• Legal compliance: to comply with our obligations under applicable Hong Kong law, respond to regulatory or law enforcement requests, and enforce our legal rights
• Analytics and improvement: to understand how users interact with our platform and improve our products and user experience
• Debt recovery: to recover outstanding amounts owed to Rently, including through credit bureau reporting or legal proceedings where necessary

4. Legal Basis for Processing

Under the PDPO, we rely on the following bases to process your personal data:

• Contractual necessity: processing required to perform our obligations to you under the Rently Terms of Service and applicable Product Terms
• Consent: where we rely on your consent, including for identity and financial verification, credit bureau checks, and marketing communications. You may withdraw consent at any time (see Section 8)
• Legitimate interests: fraud prevention, security, platform analytics, and improvement of our services, where these do not override your rights
• Legal obligation: compliance with applicable Hong Kong law and regulatory requirements

5. Who We Share Your Data With

We do not sell your personal data. We share your data only in the following circumstances:

5.1 Service Providers

We share data with third parties who assist in delivering our services, including:

• HeyMax: to facilitate rewards accrual for Earn Rewards on Rent users
• Payment processors: including card payment processors and autopay (Direct Debit) and FPS operators, to process payments and collections
• Credit bureaus: to conduct credit assessments for applicable add-on products
• Analytics providers (Mixpanel): to track platform usage and improve user experience
• CRM and marketing tools (HubSpot): to manage customer communications and drip campaigns
• Cloud infrastructure providers: for hosting and data storage

5.2 Landlords

Where necessary to deliver our services, we may share limited tenancy-related information with your Landlord or their agent, such as confirming that a payment has been made.

5.3 Legal and Regulatory

We may disclose your personal data where required by law, court order, or regulatory authority, or where necessary to establish, exercise, or defend legal rights.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the relevant counterparty, subject to equivalent data protection obligations.

6. How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfil the purposes set out in this Policy and to comply with our legal obligations. Our general retention periods are:

• Account data: retained for the duration of your account and for 7 years after account closure, to satisfy potential legal claims and regulatory requirements
• Transaction and payment records: retained for 7 years after the relevant transaction, consistent with Hong Kong tax and record-keeping requirements
• Tenancy Agreement copies: retained for the duration of the tenancy and for 7 years after lease expiry
• Credit assessment records: retained in accordance with the requirements of the relevant credit bureau
• Usage and device data: retained for up to 3 years

When data is no longer required, we will securely delete or anonymise it.

7. How We Keep Your Data Safe

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission, access controls, and secure data storage practices.

However, no system is completely secure. If you suspect your account has been compromised, please contact us at support@rently.hk immediately.

8. Your Rights Under the PDPO

Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request that we correct any inaccurate or incomplete personal data
• Withdrawal of consent: withdraw consent for processing that is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may affect our ability to continue providing services to you 
• Data portability: in certain circumstances, request that we provide your data in a portable format

To exercise any of these rights, contact us at support@rently.hk. We will respond within 30 days.

Please note that withdrawing consent for certain processing (such as identity verification or credit assessment) may mean we are unable to continue providing one or more products to you.

9. Identity Verification and Credit Checks

9.1 Identity Verification

Where you choose to verify your identity, we obtain and verify information about your identity, tenancy, and financial standing from authorised sources, and other authorised identity verification sources. This retrieval occurs only with your consent at the point of verification.

9.2 Credit Bureau Checks

If you apply for Lower Move-In Costs or Delay Rent Payments, we will conduct a credit bureau check as part of our approval process. By proceeding with an application for either product, you consent to Rently obtaining a credit report on you from a credit bureau in Hong Kong. We may report outstanding debt owed to Rently to a credit bureau where you have defaulted on your obligations.

10. Cookies and Tracking

We use cookies and similar technologies to maintain session security, remember your p7eferences, and analyse how ouWe implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission, access controls, and secure data storage practices.

However, no system is completely secure. If you suspect your account has been compromised, please contact us at support@rently.sg immediately.

11. Minors

Our services are available to individuals aged 18 and above only. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data through our platform, please contact us at support@rently.sg and we will delete it promptly.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or through an in-app notification before the changes take effect. The updated version will always be available at rently.hk/privacy. Your continued use of the platform after any update constitutes acceptance of the revised Policy.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

Rently HK Limited (Company No. 80229163)

17th Floor, Timely Court, 99 Catchick Street, Kennedy Town, Hong Kong

Email: support@rently.hk

We will acknowledge your request within 5 business days and respond substantively within 40 days.

This Privacy Policy is governed by and construed in accordance with the laws of Hong Kong.