Effective 2 April 2026 · Version 1.0
Harthing is a record-keeping tool for private landlords. You use it to organise your compliance documents, log maintenance, track finances, and build a timestamped record of how you manage your properties. We store what you give us, keep it safe, and make it useful.
The full terms follow below, covering the same ground in the detail the law requires.
Harthing is operated by Harther Ltd, a company registered in England and Wales (company number 17075829), with its registered office at 124–128 City Road, London EC1V 2NX.
When we say "Harthing," "we," "us," or "our," we mean Harther Ltd. When we say "you" or "your," we mean you — the person or entity that has registered for an account.
You can contact us at [email protected].
For data protection queries specifically: [email protected].
For clarity throughout this document:
3.1 To use Harthing, you must be at least 18 years old and legally capable of entering into a binding agreement.
3.2 You must provide accurate information when creating your account. If anything changes — your email address, your contact details — please update your account or let us know.
3.3 You're responsible for keeping your login credentials secure. If you think someone else has accessed your account, tell us immediately at [email protected].
3.4 One person, one account. You may manage multiple properties from a single account, but you may not create multiple accounts for the same person or entity.
4.1 What Harthing does:
Harthing is a property management and compliance record-keeping tool. It helps you:
4.2 What Harthing does not do:
This is important, so we're going to be direct about it.
Harthing is an organisational tool, not a compliance service. We help you keep your records in order. We do not verify, validate, audit, or certify any of the information you enter. We do not check whether your gas safety certificate is genuine, whether your maintenance response times meet legal requirements, or whether your financial records are accurate for HMRC purposes.
Harthing does not provide legal, tax, financial, or regulatory advice. Nothing in the Service — including reminders, status indicators, dashboards, or any automated features — constitutes professional advice of any kind. If a compliance deadline appears on your dashboard, that's because you entered the data that generated it. If the underlying data is wrong, the reminder will be wrong too.
Expiry reminders and compliance alerts are courtesy notifications based on the data you provide. They are not guarantees of compliance. You remain solely responsible for meeting your legal obligations as a landlord.
The Accountability Record documents what you did; it does not confirm that what you did was sufficient. A timestamped record showing you uploaded a gas safety certificate does not mean the certificate is valid, current, or compliant. It means you uploaded it at that time. The evidential value of the record depends on the accuracy of the underlying data.
If you need legal advice, speak to a solicitor. If you need tax advice, speak to an accountant. If you need compliance verification, engage a qualified professional. We'd love to be all things to all landlords, but we'd rather be honest about what we are.
5.1 You own your Content. Uploading data to Harthing does not transfer ownership to us. Your documents, records, and data remain yours.
5.2 You grant us a licence to process your Content solely for the purpose of providing the Service. This licence is limited, non-exclusive, and lasts only for as long as your Content remains on the Service. We will not use your Content for any purpose beyond operating and improving the Service for you.
5.3 You are responsible for the accuracy of your Content. We don't review, verify, or validate what you upload. If you upload an expired gas safety certificate and mark it as current, Harthing will treat it as current. The responsibility is yours.
5.4 Tenant Data. When you enter Tenant Data into Harthing, you are acting as the data controller for that data under UK GDPR. Harther Ltd processes Tenant Data on your behalf as a data processor. The terms governing this relationship are set out in the Data Processing Schedule (Schedule 1) at the end of this document.
5.5 When you create a tenancy record that includes a tenant's email address, Harthing will send an automated privacy notice to that tenant. This is required under UK GDPR Article 14 — we are obliged to inform individuals when their personal data is being processed, even if they didn't provide it directly to us. This notification is sent on your behalf and explains your use of Harthing for record-keeping, along with the tenant's data rights.
5.6 Data portability. You can export your data at any time. If you close your account, we'll provide your data in a standard, machine-readable format on request. Details of our data retention periods are set out in our Privacy Policy.
Harthing is built for property management. Use it for that.
6.1 You agree to use the Service only for lawful purposes related to the management of residential property, and in accordance with these Terms.
6.2 You must not:
6.3 Prohibited content — Online Safety Act 2023 compliance
Harthing is classified as a user-to-user service under the Online Safety Act 2023. You must not upload, store, or transmit through the Service any content that constitutes illegal content as defined by that Act. This includes, but is not limited to:
6.4 Content reporting. If you encounter any content on the Service that you believe is illegal or violates this Acceptable Use Policy, please report it immediately to [email protected]. We will review all reports promptly and take appropriate action, which may include removing content, suspending accounts, and reporting to law enforcement where required by law.
6.5 Our enforcement rights. We reserve the right to remove any Content and suspend or terminate any Account that violates this Acceptable Use Policy, without prior notice where we reasonably believe the content is illegal or poses an immediate risk. Where we become aware of CSAM or terrorism content, we are legally required to report it to the relevant authorities and to retain relevant information securely.
7.1 Pricing. Harthing is a paid subscription service. Current pricing is published at harthing.co.uk and is banded by portfolio size:
| Portfolio size | Monthly price |
|---|---|
| 1–2 properties | £12/month |
| 3–5 properties | £24/month |
| 6+ properties | £36/month |
All prices include VAT where applicable. Prices are labelled "launch pricing" and may be adjusted in the future with reasonable notice.
7.2 Beta / early access users. Users who register during the early access period receive 12 months' free access to the full Service, starting from the date paid pricing goes live. This replaces any earlier communications about free access terms.
7.3 Billing. Subscriptions are billed monthly. You authorise us to charge your chosen payment method on a recurring basis. If payment fails, we'll let you know and give you a reasonable period to resolve it before restricting access.
7.4 Cancellation. You can cancel your subscription at any time. Cancellation takes effect at the end of your current billing period. We don't do exit interviews, guilt trips, or dark patterns. If you want to leave, you leave.
7.5 Refunds. We don't offer refunds for partial months. If you believe you've been charged in error, contact us and we'll sort it out.
7.6 Price changes. If we increase prices, we'll give you at least 30 days' notice and the option to cancel before the new price takes effect.
8.1 The Service — including its design, code, branding, text, graphics, and underlying technology — is owned by Harther Ltd and is protected by copyright, trademark, and other intellectual property laws.
8.2 These Terms grant you a limited, non-exclusive, non-transferable, revocable licence to use the Service for its intended purpose during your subscription.
8.3 You must not copy, modify, distribute, sell, or create derivative works based on any part of the Service without our written permission.
8.4 "Harthing," "Letterlea," "Harther," and associated logos and marks are trademarks of Harther Ltd. You may not use them without our prior written consent.
9.1 We aim to keep the Service available and reliable, but we don't guarantee uninterrupted access. Maintenance, updates, and circumstances beyond our control (internet outages, infrastructure failures, acts of God) may cause temporary disruption.
9.2 We may modify, update, or discontinue features of the Service from time to time. Where changes are material, we'll give you reasonable notice. We won't remove core functionality (the Accountability Record, Evidence Bundle, compliance document storage) without at least 90 days' notice.
9.3 The Service is currently in its early stages. Features will be added, refined, and occasionally retired as the product develops. We appreciate your patience and your feedback — both help us build something better.
10.1 To the maximum extent permitted by law, Harther Ltd's total liability to you for any claims arising from or related to these Terms or your use of the Service is limited to the amount you have paid to us in the 12 months preceding the claim.
10.2 We are not liable for any indirect, incidental, consequential, special, or punitive damages, including but not limited to loss of profits, data, business, or goodwill, however caused.
10.3 Specifically, and without limiting the above:
10.4 Nothing in these Terms excludes or limits our liability for death or personal injury caused by our negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded or limited by law.
You agree to indemnify and hold harmless Harther Ltd, its directors, employees, and agents from and against any claims, damages, losses, liabilities, and expenses (including reasonable legal fees) arising out of or related to:
12.1 By you. You may close your account at any time by contacting us or using the account closure function in the Service. Cancellation of your subscription (Section 7.4) ends billing; account closure removes your account entirely.
12.2 By us. We may suspend or terminate your account if:
12.3 Where we terminate your account, we'll provide you with a reasonable opportunity to export your data, except where we are legally prohibited from doing so (for example, where content has been reported to law enforcement).
12.4 Sections that should survive termination (limitation of liability, indemnification, intellectual property, and data processing obligations) will survive.
13.1 If you have a complaint about the Service, contact us first at [email protected]. We'd genuinely rather sort things out directly than through lawyers.
13.2 These Terms are governed by the laws of England and Wales. Any disputes that can't be resolved informally will be subject to the exclusive jurisdiction of the courts of England and Wales.
14.1 We may update these Terms from time to time. If we make material changes, we'll notify you by email or through the Service at least 30 days before they take effect.
14.2 Continued use of the Service after changes take effect constitutes acceptance of the updated Terms. If you don't agree, you may close your account before the changes apply.
14.3 We'll keep previous versions of these Terms available on request.
15.1 If any provision of these Terms is found to be unenforceable, the remaining provisions continue in full force and effect.
15.2 Our failure to enforce any right or provision of these Terms does not constitute a waiver of that right or provision.
15.3 These Terms, together with our Privacy Policy, Cookie Policy, and the Data Processing Schedule below, constitute the entire agreement between you and Harther Ltd regarding the Service.
15.4 You may not assign or transfer your rights under these Terms without our consent. We may assign our rights and obligations to an affiliate or successor.
This Schedule forms part of the Terms of Use and sets out the terms on which Harther Ltd processes personal data on your behalf under UK GDPR Article 28.
1.1 For the purposes of this Schedule:
1.2 This Schedule applies to all Tenant Data and any other personal data relating to identifiable individuals that the Controller enters into the Service.
2.1 Subject matter and purpose: The processing of personal data by the Processor is necessary for the provision of the Harthing property management service. The Processor stores, organises, retrieves, and presents the Controller's data within the Service, generates automated notifications (including Article 14 tenant privacy notices), and produces exports and reports as requested by the Controller.
2.2 Duration: Processing continues for the duration of the Controller's subscription and for the retention periods set out in the Privacy Policy following account closure.
2.3 Types of personal data processed:
2.4 Categories of data subjects:
3.1 The Controller warrants that it has a lawful basis under UK GDPR for processing the personal data it enters into the Service, and that it has provided (or will provide) appropriate notices to data subjects as required by law.
3.2 The Controller acknowledges that Harthing sends an automated Article 14 notification to tenants when a tenancy record is created with a tenant email address. The Controller must ensure that the tenant email address provided is accurate and that the Controller has a lawful basis for sharing the tenant's email address with the Processor for this purpose.
3.3 The Controller is responsible for the accuracy of all personal data entered into the Service and for responding to data subject rights requests in a timely manner (with our assistance as set out below).
4.1 Instructions. The Processor will process personal data only on documented instructions from the Controller. The Controller's instructions are defined by the Controller's use of the Service (uploading data, configuring settings, requesting exports). The Processor will not process personal data for any purpose other than providing the Service unless required by law, in which case the Processor will inform the Controller before processing (unless prohibited by law from doing so).
4.2 Confidentiality. The Processor ensures that all persons authorised to process personal data are bound by appropriate confidentiality obligations.
4.3 Security measures. The Processor implements appropriate technical and organisational measures to protect personal data, including:
4.4 Sub-processors. The Processor uses third-party sub-processors to provide the Service (including cloud hosting and email delivery). A current list of sub-processors is available on request. The Processor will notify the Controller of any new sub-processors at least 14 days before they begin processing, giving the Controller an opportunity to object. If the Controller objects and the matter cannot be resolved, the Controller may terminate the Service.
4.5 Data subject rights. The Processor will assist the Controller in responding to requests from data subjects exercising their rights under UK GDPR (access, rectification, erasure, restriction, portability, objection). Where a data subject contacts the Processor directly, the Processor will direct them to the Controller unless the request relates to the Processor's own processing activities.
4.6 Data breach notification. The Processor will notify the Controller without undue delay (and in any event within 72 hours of becoming aware) of any personal data breach affecting the Controller's data, providing sufficient detail for the Controller to meet its own notification obligations to the ICO and to affected data subjects.
4.7 Data Protection Impact Assessments. The Processor will provide reasonable assistance to the Controller in conducting Data Protection Impact Assessments where required.
4.8 Audit. The Processor will make available to the Controller all information necessary to demonstrate compliance with this Schedule and will allow for and contribute to audits and inspections conducted by the Controller or an auditor mandated by the Controller, subject to reasonable notice and scope limitations.
5.1 The Processor will not transfer personal data outside the United Kingdom unless adequate safeguards are in place in accordance with UK GDPR (such as an adequacy decision, standard contractual clauses, or binding corporate rules).
5.2 Where sub-processors are located outside the UK, appropriate transfer mechanisms will be documented and made available on request.
6.1 On termination of the Controller's account, the Processor will:
6.2 Backup copies will be deleted in accordance with the Processor's standard backup rotation schedule, which shall not exceed 180 days from account closure.
7.1 The liability of each party under this Schedule is subject to the limitations set out in Section 10 of the Terms of Use.