← Back

Privacy notice

Last updated: [DATE]. Draft for the committee to complete.

Who we are

Building Hub is run by [NAME OF RESIDENTS' ASSOCIATION / RTM COMPANY / RMC], [ADDRESS] ("the committee"). We are the controller of the personal data in this app. Contact: [EMAIL].

What we hold

Your email address and name; which flat you live in and whether you own or rent it; maintenance requests, photos and comments you send; and, for committee members, votes, decisions and declared interests on quotes and invoices.

Why, and our lawful basis

To manage repairs and maintenance of the building, tell residents about things that affect them, and keep proper records of how service charge money is spent. Our lawful basis is legitimate interests in running the building (UK GDPR Article 6(1)(f)), and for owners, the obligations in the lease.

Who can see it

Committee members can see residents' names, emails and flats and all maintenance requests. Residents can see only their own requests and the notices and documents shared with them. Residents see budget totals but never supplier invoices. We do not sell your data or use it for marketing.

Who processes it for us

Supabase (database, login and file storage; [REGION, e.g. London]), Vercel (website hosting) and Resend (sending emails). Some of these providers may process data outside the UK under approved safeguards.

How long we keep it

Your account stays until you delete it or leave the building. Repair and financial records are kept for [6] years, as they form part of the building's records, including the name of the person who reported a repair.

Your rights

You can download your data and delete your account from the Account page. You can also ask us to correct or restrict your data, or object to how we use it, by emailing [EMAIL]. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.