Privacy Policy
How Real Enquiries collects, uses, stores, and protects personal data across the platform.
Real Enquiries (“we”, “us”, “our”) provides software that helps property teams manage enquiries, applicants, tenants, and document workflows. This Privacy Policy explains what personal data we process, why we process it, and the rights you have. By visiting our website or using the Real Enquiries application, you agree to the terms of this notice.
Who we are and how to contact us
Real Enquiries is operated by Itamar Junior in Ireland and acts as data controller for customer accounts and the personal data processed to deliver the service. Questions, data requests, or concerns can be directed to hello@itjunior.dev.
Personal data we collect
- Account & team data: administrator and agent details, login credentials, roles, activity logs.
- Applicant & tenant data: identification documents, references, employment details, bank statements, PPS numbers (Ireland), waiting list preferences, communication history.
- Property & event data: property descriptions, availability, booking slots, attendee names, ICS calendar entries.
- Usage data: IP address, device/browser, pages visited, actions taken, error logs.
- Support communications: emails, notes, attachments exchanged with our support team.
How we use your information
- Authenticate users, manage permissions, and protect the platform.
- Provide core CRM workflows (lead capture, application reviews, document creation, signature collection).
- Send operational messages (booking confirmations, queue notifications, DocuSign envelope updates, maintenance alerts).
- Meet legal obligations (e.g., Residential Tenancies Board reporting) and defend legal claims.
- Improve the service through analytics, product research, and error monitoring.
Legal bases under GDPR
- Contractual necessity: To perform the services you or your organisation has subscribed to.
- Consent: For optional communications, marketing, waiting list notifications, and uploading sensitive documents.
- Legal obligation: For tenancy and anti-fraud reporting (e.g., RTB requirements).
- Legitimate interests: To secure the platform, prevent abuse, and enhance user experience.
Data sharing & processors
We share data with carefully selected partners only as necessary to deliver the service:
- Infrastructure: Amazon Web Services (EC2, RDS, S3, SES) located in the EU/EEA.
- Document & signature processes: DocuSign (envelopes, webhook handling), Browsershot/Dompdf for PDF rendering.
- Integrations: Microsoft and Xero via OAuth (when customers connect their accounts).
- Monitoring & support: Sentry, log aggregation, customer support tooling.
- Regulators: Residential Tenancies Board (RTB) in Ireland when mandated.
International transfers are safeguarded by Standard Contractual Clauses or equivalent measures.
Retention
- Account data: retained while the subscription is active and up to 24 months afterwards, unless a longer period is required by law.
- Applicant/tenant records: retained for 24 months by default; configurable by controllers. Records removed upon request when permitted.
- RTB submissions: retained in accordance with relevant Irish tenancy regulations.
- Backups: encrypted, rotated, and purged via automated policies.
Security
- Encryption in transit (TLS 1.2+) and at rest (AES-256 for storage and backups).
- Role-based access controls, mandatory MFA for administrators, and least-privilege service accounts.
- Network and application monitoring, automated patching, vulnerability scanning, and logging.
- Document storage restricted to authorised users; documents can be redacted or deleted on request.
Your rights
Under GDPR you can request access, rectification, erasure, restriction, data portability, and objection to processing. You may withdraw consent at any time. To exercise these rights, contact hello@itjunior.dev. You also have the right to lodge a complaint with the Irish Data Protection Commission.
Cookies & tracking
We use essential cookies for authentication, preference storage, and session security. Analytical and marketing cookies are optional and controlled via your browser or account preferences. See our Cookie Policy for details.
Children’s data
The platform is not directed at children under 16. If we learn we have collected personal data from a child without appropriate consent, we will delete it promptly.
Changes to this policy
We may update this policy to reflect product changes or legal requirements. Material updates will be announced via email, in-app notifications, or release notes. The “Last updated” date will always indicate the current version.
Contact
Data protection queries: hello@itjunior.dev. Mailing address available upon request.