1. Who we are
This policy covers the Zany website and its pilot. Zany also has a preview with fictional example properties. If you use the preview without an account, what you enter stays in your browser for that visit and is not sent to us.
2. What we collect
Your account
Your name and email address, the date your account was created and whether you have confirmed your email. Your password goes straight to our authentication provider and is stored only as a secure hash. Zany never sees it.
If you sign in with Google
Google sends us your name, your email address and an identifier for your Google account. It does not send your phone number or your Google password. Google also sends a link to your profile picture. Our authentication provider stores it, but Zany does not use or display it.
Properties you advertise
Drafts and listings:
- title, address, county and Eircode;
- property type, whether it is to rent or for sale, and the price;
- bedrooms, bathrooms, BER and description;
- photos;
- status and publication dates.
The details and photos of a published listing are public. Photos are resized and re-encoded in your browser before upload, which removes embedded information such as the location where a photo was taken.
Payments for listing plans
If you pay for a listing plan, you enter your card details on Stripe's payment page. We never see or store them. From Stripe we receive and keep:
- the plan, the listing it is for, the amount and any VAT;
- the payment status and dates, including any dispute with your bank or card issuer;
- Stripe's references for the payment.
We also record that, before paying, you asked for your listing to go live straight away and agreed that the payment is not refundable.
Details you choose to share (optional)
In Account settings you can add your profession. It is saved only if you agree to share it with the advertisers of the homes you apply for, and we record when you agreed. You can stop sharing at any time. We do not ask for your date of birth.
Applications and viewings
- the property you applied for;
- the name and email address on your account when you applied, and your profession if you agreed to share it;
- the number of adults, whether you have pets, your mobile number if you give it, and your message;
- for homes to rent, if you answer them: your work situation, how long you plan to rent and whether you have references available (we do not ask these when you apply to buy);
- the application status: applied, accepted, rejected or withdrawn;
- the viewing times you book;
- cancellations, and requests for another time together with the reason you give.
We remember your application answers to fill in your next application.
Notifications
Notifications shown on Zany: when someone applies for your property, and when an advertiser accepts or declines your application. We record when you have read them.
Messages
Once messaging is available, we store the text of messages between the people involved in a confirmed viewing and when they were read. Attachments are not supported.
Saved items and email preferences
- the properties you save;
- the filters of the searches you save, and whether alerts are on;
- your choices about activity and message emails;
- a record of each email we queue for you and whether it was sent. This record does not contain message text.
Reports and support
Once reporting and support are available, we store what you report or ask and how we handled it.
Technical data
When your browser connects to Zany, our hosting provider records technical information to keep the service secure: your IP address, browser type and the time of the request.
What we do not collect
We do not ask for any of the following:
- identity documents or PPS numbers;
- card or bank details (when you pay for a listing plan, Stripe collects your card details on its own page), credit checks or income evidence;
- profile photos.
Please do not include sensitive information in listings, applications or messages. This includes information about health, religion or ethnic origin.
3. Why we use it and our legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Share your profession with the advertisers you apply to | Profession, the date you agreed | Your consent (Article 6(1)(a)), which you can withdraw in Account settings |
| Create and run your account, sign you in | Account and Google sign-in data | Performing our contract with you (Article 6(1)(b)) |
| Publish and manage your listings and show them to others | Listing details and photos | Contract |
| Take payment for listing plans and keep accounting records | Payment records, email address | Contract; legal obligation to keep accounting and tax records (Article 6(1)(c)) |
| Handle applications, viewings and, when available, messages | Application, viewing and message data | Contract |
| Keep your saved properties and searches, and send the alerts you ask for | Saved items, email address | Contract |
| Send account emails (confirmation, password reset) and activity emails | Email address, event record | Contract. You can switch activity emails off |
| Keep Zany secure, prevent fraud and abuse, handle reports and enforce our terms | The data relevant to the issue, technical data | Our legitimate interest in keeping users safe and Zany trustworthy (Article 6(1)(f)); legal obligations |
| Meet legal obligations, respond to lawful requests, establish or defend legal claims | The data required | Legal obligation (Article 6(1)(c)); legitimate interests |
We do not send marketing emails and we do not sell personal data.
We do not make decisions about you by automated means, and we do not score, rank or profile renters. Advertisers decide on applications themselves.
5. How long we keep it
Unpublished property drafts are kept for 120 days from creation. Editing or renaming a draft does not restart that period. Published properties stay public for 60 days. After withdrawal or expiry, the property is private for up to 30 days before its details, associated draft, applications, viewing records and messages are deleted. Returning to editing does not restart the deletion deadline. The My properties page shows the scheduled deletion date.
You can delete a property earlier from My properties. It leaves the site immediately and its photos are queued for permanent deletion. Automatic cleanup runs daily, so storage removal may finish during the next cleanup run. Failed removals are retried. A recent unfinished checkout can delay deletion until its payment status is resolved. Payment records are kept separately, as described below. Information needed for a legal obligation, a dispute, or fraud and abuse prevention may also be retained separately. Backups are overwritten on a rolling basis.
Other account data is kept while your account remains open, unless a shorter period applies.
You can delete your account at any time in Account settings. This deletes your account and the records that belong to it straight away. Its listing photos stay in private storage, where no one using Zany can open them, and are deleted automatically 30 days later. The exception is information we must keep to meet a legal obligation, resolve a dispute or prevent fraud and abuse, such as a record of a moderation decision. Backups are overwritten on a rolling basis.
Payment records are kept for six years after the end of the year to which they relate, as required under Irish tax law. If you delete your account, we retain these records without linking them to your account. Stripe also retains its own payment records in accordance with its legal and regulatory obligations.
6. Your rights
Under the General Data Protection Regulation you have the right to:
- access your data and get a copy;
- correct inaccurate data. You can change your name, email and profession in Account settings;
- have your data deleted. You can delete your account yourself in Account settings;
- restrict how we use it;
- receive the data you gave us in a portable format;
- object to uses based on our legitimate interests;
- withdraw consent, where we rely on it.
To use any of these rights, write to [email protected]. We reply within one month. For complex requests, we can extend this by up to two more months, and we will tell you if we do. We may ask you to confirm your identity first. There is normally no charge.
You can also complain to the Data Protection Commission at dataprotection.ie. We would appreciate the chance to resolve your concern first.
8. Security
We protect your data in these ways:
- connections are encrypted;
- the database lets each account reach only its own private records;
- private photos are shown only through short-lived links;
- passwords are handled only by our authentication provider.
No system is perfectly secure. If a breach puts your data at risk, we will notify the Data Protection Commission within 72 hours, and we will tell you where the law requires it.
9. Children
Zany is for adults aged 18 or over. We do not knowingly collect data from children. If you believe a child has created an account, please contact us.
10. Changes to this policy
We will update this policy when our services change. The date at the top shows the current version. If a change is significant, we will tell you by email or on the site.