GDPR Risk Calculator for Estate Agents & Letting Agents

Use this quick check to spot the GDPR risks and documentation gaps that may apply to estate agents & letting agents, then start building the documents behind your answers.

Indicative check

Answer 11 simple questions.

This version focuses on property enquiries, viewings, AML, Right to Rent, tenant applications, landlord records, contractors, and property portals.

The calculator gives an indicative risk score, but the useful bit is what comes next: a free account lets you begin turning your answers into working GDPR documentation.

With a free account you can:

  • Answer the guided GDPR wizard in plain English
  • Create a practical action plan from your answers
  • Start building your GDPR statement, records, and supporting forms

Likely estate agency document areas

  • Record of Processing Activities for sales, lettings, management, AML, Right to Rent, marketing, and staff records
  • Retention notes for enquiries, viewing notes, tenant applications, referencing files, ID documents, and tenancy records
  • Supplier and processor list covering portals, referencing providers, payment systems, contractors, software, and email/SMS tools
1 Do you have customers, clients, employees or contacts within the EU or UK?

GDPR applies to organisations involved in processing personally identifiable data about people in the EU, and UK GDPR applies to personal data handled in the UK.

2 Does your business or organisation employ 250 or more staff?

Larger organisations are more likely to have formal documentation obligations and more complex data handling activity.

3 Do you collect or store any personal data?

Personal data can include names, email addresses, phone numbers, photos, addresses, customer records, employee records, supplier details, and similar information.

4 Do you collect or store any sensitive personal data?

This may include information about health, ethnicity, religion, politics, genetics, sexual orientation, criminal records, or other special category data.

5 Do you collect personal data regularly?

Regular collection can include website enquiries, customer or service-user management, email marketing, orders, bookings, payroll, HR, support, or routine administration.

6 Do you process any personal data for someone else?

Processors handle personal data on behalf of another organisation, such as clients, customers, service users, or partners.

7 Do you operate CCTV on your premises?

CCTV can involve personal data because individuals may be identifiable from recorded images.

8 Do you collect tenant referencing, guarantor, affordability, or employment information?

Referencing and affordability checks can include financial, employment, housing, identity, and third-party contact information.

9 Do you handle Right to Rent, AML, identity documents, or proof of funds?

Passports, share codes, visas, biometric residence permits, utility bills, source-of-funds details, and ID checks need clear handling and retention rules.

10 Do you share personal data with landlords, vendors, solicitors, referencing providers, contractors, or property portals?

Agencies often pass information between several parties. Your documentation should explain who receives what data and why.

11 Do you keep viewing notes, offer records, access instructions, inspection reports, or maintenance records?

Operational records can contain contact details, occupancy details, photos, access notes, complaint history, and contractor updates.

Ready to move from risk to records?

Start your GDPR document pack while the answers are fresh.

Create a free account, work through the guided wizard, and build a clearer picture of the documents, tasks, and records your organisation needs.

Create free account
GDPRQuick

Create and maintain your GDPR documents with GDPRQuick, the quicker way to get your documentation in order.

CliqTo Media Ltd, C/o 67 Burton Bank Lane, Stafford, England, ST17 9JJ

Email: hello@gdprquick.com

Log in

Product

Resources

Legal