Privacy notice
Purpose of this notice
This notice explains how personal data is handled in the Asset Performance Hub. It is separate from the User Agreement: accepting the User Agreement is not consent to data processing and is not consent to marketing.
Who is the controller
The landlord organisation that owns this deployment is the data controller for the housing, resident, property and user data held in the hub. Contact details are shown in the current User Agreement.
What personal data is held
Account details for authorised users (name, work email, role, module grants, approval state and sign-in history), records of actions taken in the system, and property or resident-related information uploaded by the organisation.
Lawful basis
Processing of user account and audit data is generally necessary for the organisation's legitimate interests in secure, accountable administration of its assets, and to meet regulatory and statutory obligations. The controller confirms the applicable lawful basis in its own record of processing.
Monitoring and audit logs
Sign-in, access decisions, exports and changes to governed settings are logged for security and assurance. Logging is proportionate and reviewed under the organisation's policies.
Public guided demo
Optional first-party analytics run on the public guided demo only if you accept them in the privacy choices banner, and you can change or withdraw that choice at any time through Cookie settings. When accepted, the demo records viewing events against a random first-party pseudonymous visitor reference and a per-tab session identifier, together with engagement, a coarse source or campaign category, a broad device, browser and operating-system family and, when available, approximate city, region and country. If you reject optional cookies, no persistent analytics profile is kept and the demo and the Request to Join form remain fully available. Nothing stored includes names, contact details, raw IP addresses, precise location, full user-agent strings, advertising identifiers or device fingerprints, and no third-party advertising trackers are used. Any request IP used by the hosting service to derive city and country is discarded and is not stored by Asset Insights.
Request to join
If you submit a Request to Join, the details you provide (name, organisation, work email and any optional role, size, region, interests or message) are used only to respond to your enquiry. Your consented, pseudonymous demo journey is linked to that enquiry only where you accepted optional analytics; information you supply is always kept distinct from analytics activity, and nothing about your identity, employer or contact details is inferred from cookies, IP address, location or browsing behaviour. Retention periods for analytics and enquiry records are configured by the organisation and recorded in the Security & GDPR control centre.
Retention
Audit and acceptance evidence is retained for as long as needed for assurance and regulatory purposes, and then reviewed under the organisation's retention schedule.
Your rights
You may ask for access to your personal data, correction of inaccurate data, and — where applicable — restriction, objection or erasure. Requests should go to the organisation's data protection contact.
Legal review
This is a working notice provided with the platform. The controller must review and adapt it before relying on it in production.