Privacy Policy

YourBuilding (yourbuilding.uk) is a property technology platform helping leaseholders in England and Wales exercise their Right to Manage under the Commonhold and Leasehold Reform Act 2002.

For the purposes of data protection law, YourBuilding operates as a data controller for information collected directly from users of the platform. Where leaseholders have formed an RTM company and are using the platform to manage their building, the RTM company acts as the data controller and YourBuilding acts as a data processor on their behalf.

Contact: hello@yourbuilding.uk

We collect and process the following categories of personal data:

Data you provide directly:

• Your name, email address, phone number and postcode when you submit an eligibility check
• Your answers to eligibility confirmation questions
• Details of your landlord or managing agent where you provide them
• Contact details (email address or phone number) you provide for other leaseholders in your building

Data we obtain from public registers:

• Building data retrieved from the EPC Register, HM Land Registry, Companies House and Homedata to carry out your eligibility check
• The names and correspondence addresses of other registered leaseholders at your building, retrieved from HM Land Registry

Data generated through use of the platform:

• Your progress through the Right to Manage process
• Documents generated on your behalf (outreach letters, notices)
• Notes from our team's interactions with you

We process your personal data on the following bases:

Contract and legitimate interests - when you submit an eligibility check, we process your data to provide the service you have requested and to contact you with your results and next steps.

Legitimate interests- when we retrieve other leaseholders' names and correspondence addresses from HM Land Registry, we do so on the basis of legitimate interests. The purpose is to help you exercise a statutory legal right (Right to Manage) by identifying and contacting qualifying tenants at your building. We consider this processing to be proportionate, expected given the public nature of Land Registry records, and unlikely to cause harm to the individuals concerned.

We do not use your data for marketing without your explicit consent.

This section is for people who have received outreach from a neighbour using YourBuilding.

If you have received a letter or message from a neighbour about a Right to Manage application at your building, your name and correspondence address may have been retrieved from HM Land Registry by the YourBuilding platform. This is a public register of property ownership in England and Wales.

Your data was used solely for the purpose of contacting you about a Right to Manage application at your building - a statutory process under the Commonhold and Leasehold Reform Act 2002.

You have the right to object to this processing. If you would like your details removed from the platform, please contact us at hello@yourbuilding.uk and we will action your request within 14 days.

Eligibility check data is retained for two years from the date of submission and then permanently deleted.

RTM process data (documents, correspondence, building management records) is retained for the duration of your RTM company's activity on the platform and for six years thereafter, in line with standard legal document retention requirements.

You can request deletion of your data at any time by contacting hello@yourbuilding.uk. We will respond within 14 days.

We do not sell your data to third parties.

We use the following third-party services to operate the platform. Each acts as a sub-processor and processes data only on our instructions:

• Supabase - database hosting (EU region)
• Resend - email delivery
• Vercel - platform hosting
• HM Land Registry - public register (read only, not a processor)
• EPC Register - public register (read only, not a processor)
• Companies House - public register (read only, not a processor)
• Homedata - building data
• Postcodes.io - address validation

You have the following rights regarding your personal data:

Right to access - you can request a copy of the data we hold about you.

Right to rectification - you can ask us to correct inaccurate data.

Right to erasure - you can ask us to delete your data, subject to any legal retention requirements.

Right to restrict processing - you can ask us to pause processing your data in certain circumstances.

Right to object - you can object to processing carried out on the basis of legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to data portability - you can request your data in a machine-readable format.

To exercise any of these rights, contact hello@yourbuilding.uk. We will respond within one calendar month.

Where you are using YourBuilding as an individual leaseholder exploring or beginning the RTM process, YourBuilding is the data controller.

Where an RTM company has been formed and is using the platform to manage its building, the RTM company is the data controller and YourBuilding acts as a data processor. In this case, a Data Processing Agreement governs the relationship between the RTM company and YourBuilding. This agreement is available at yourbuilding.uk/dpa.

We use essential cookies only to maintain your session while you use the platform. We do not use tracking, advertising or analytics cookies. We do not use Google Analytics or any third-party analytics service.

We may update this policy from time to time. The date at the top of this page shows when it was last updated. Significant changes will be communicated by email where we hold your contact details.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.