Awaab's Law Phase 2 starts 30 November 2026Check which rules apply →
Social Housing Compliance

Privacy Policy

Last updated: 7 October 2026

1. Who we are

Social Housing Compliance is run by Dutywise Ltd ("we", "us", "our"), a private limited company registered in England and Wales with company number 17498786. We are the controller of the personal information described in this policy. Email: help@socialhousingcompliance.uk, or use our contact form. Registered office: 8 Cornfield Close, Chandler's Ford, Eastleigh, SO53 4HD.

We are registered with the Information Commissioner's Office (ICO), the UK's data protection regulator. Our registration number is ZC263109.

2. The short version

  1. We collect what we need to run your account and the Service, take payment and support you.
  2. We don't sell your information, and we don't use it for advertising.
  3. Information you enter about other people, such as your staff or residents, is handled for you, and you control it (see section 6).
  4. We never ask for, and you must not enter, health, disability or vulnerability details. Residents' names and addresses typed into letters are not saved.
  5. You have rights over your information, and you can complain to us or to the Information Commissioner's Office.

3. What this policy covers

This policy covers our website and web app. It explains how we use personal information about our customers, their team members and visitors. Section 6 explains how we handle information you enter about other people.

4. Information we collect

  1. Account information: your email address, your name if you give it, and your password, which we store in a scrambled (hashed) form so we can't see it.
  2. Team information: the email addresses of people you invite to your organisation, their role, and when they joined.
  3. Organisation details: information you enter about your organisation, such as its contact details, the job titles of the people in key roles, and your managing agent's name and contact details.
  4. Records: complaints, hazard and information request logs (your references, short summaries, dates and outcomes), tasks, staff roles with initials or staff references, and an activity log showing which team member did what and when.
  5. Payment information: if you subscribe, our payment provider Stripe collects your card details. We receive limited information, such as your name, billing address, the last four digits of your card and your payment history.
  6. Messages: what you send us when you ask for support or give feedback.
  7. Technical and usage information: your IP address, browser and device type, log-in times, pages visited and error logs, collected automatically when you use the Service.

5. How we use your information, and our lawful bases

  1. To create and run your account and provide the Service. Lawful basis: contract.
  2. To take payment and manage your subscriptions. Lawful basis: contract.
  3. To send service emails, such as account confirmation, password resets and important changes to the Service or our terms. Lawful basis: contract, and our legitimate interest in keeping you informed about the Service you use.
  4. To answer your questions and support you. Lawful basis: contract and legitimate interests.
  5. To keep the Service secure, prevent fraud and misuse, and fix problems. Lawful basis: our legitimate interest in running a secure and reliable service.
  6. To understand how the Service is used and improve it. Lawful basis: our legitimate interest in developing the Service. Where we can, we use information that doesn't identify you.
  7. To send you news and offers about our own products. Lawful basis: your consent, or for existing customers our legitimate interests where the law allows. You can unsubscribe at any time using the link in any marketing email.
  8. To keep accounting and tax records and meet our other legal duties. Lawful basis: legal obligation.
  9. To establish, exercise or defend legal claims. Lawful basis: legitimate interests.

We don't make decisions about you using only automated processing that have legal or similarly significant effects on you.

6. Information you enter about other people

When you enter information about other people, such as your staff, contractors or residents, you decide what is collected and why. For that information, you are the controller and we are your processor. We only use it to provide the Service to you, under the data processing terms in our Terms of Service. Please don't enter information about anyone's health, disability or vulnerable situation, and use references rather than residents' names. If you are a resident and have a question about your information, please contact your landlord. If you contact us instead, we'll pass your request to them.

7. Who we share information with

We only share personal information with:

  1. service providers who help us run the Service: Lovable (app hosting, database and account emails, built on Supabase), Stripe (payments) and Zoho (our email), and Google (Google Ads), which measures how our adverts perform if you agree to advertising cookies. They may only use it to provide their services to us, except that Stripe also uses some payment information for its own purposes, such as preventing fraud, under its own privacy policy;
  2. professional advisers, such as our accountant, lawyers and insurers, when needed;
  3. the police, regulators, courts or others when the law requires it, or to protect our rights or someone's safety; and
  4. a buyer of our business, or anyone we transfer it to, who must use your information in line with this policy.

We don't sell your personal information.

8. International transfers

Our service providers may store or process information outside the UK, including in the European Economic Area and the United States. When information leaves the UK, we make sure it is protected by UK adequacy regulations, the Information Commissioner's International Data Transfer Agreement or Addendum, or another safeguard allowed under UK data protection law. Contact us for more details.

9. How long we keep information

  1. Account, organisation and record information: while your account is open. If you close your account, we delete it within 90 days.
  2. Unused free accounts: if you haven't logged in for 2 years, we'll email you, and delete the account if you don't reply within 30 days.
  3. Billing and payment records: as long as tax and accounting rules require, usually 6 years.
  4. Support messages: up to 2 years after your question is resolved.
  5. Technical logs: normally no more than 12 months.
  6. Backups: deleted in the normal backup cycle.

10. How we keep information safe

We use encrypted connections (https), store passwords in hashed form, separate each organisation's data so only its own team can see it, limit who can access information, and use established service providers with strong security. No system is completely secure, but if a breach happens that affects you, we'll tell you and the Information Commissioner's Office where the law requires.

11. Your rights

Under UK data protection law you have the right to: (a) get a copy of your personal information; (b) have inaccurate information corrected; (c) have your information deleted; (d) restrict how we use your information; (e) object to how we use your information, including an absolute right to object to direct marketing; (f) receive your information in a format you can take to another provider; and (g) withdraw your consent at any time, where we rely on consent. You can see, change and delete much of your information yourself in the Service. To make any request, email help@socialhousingcompliance.uk or use our contact form. We may need to confirm your identity. We'll reply within one month. For complex requests, we can extend this by up to two further months, and we'll tell you if we do. Requests are usually free.

12. Complaints

If you're unhappy with how we've handled your information, please complain to us first at help@socialhousingcompliance.uk. We'll acknowledge your complaint within 30 days, look into it without undue delay, keep you updated, and tell you the outcome. You can also complain to the Information Commissioner's Office (ICO): www.ico.org.uk/make-a-complaint, helpline 0303 123 1113.

13. Cookies and similar technology

We use strictly necessary cookies and similar browser storage to keep you logged in and keep the Service secure. These don't need your consent. Our pages include Google's tag, which helps us measure how well our adverts work. It doesn't set analytics or advertising cookies unless you agree using our cookie banner. Until you do, Google may receive limited information without cookies, such as that a page was visited. You can change your choices at any time using the Cookie settings link at the bottom of every page. Our hosting provider may also record basic visit statistics, such as pages viewed, device type and country.

14. Children

The Service is for business use by adults. We don't knowingly collect information from anyone under 18.

15. Changes to this policy

We may update this policy. We'll change the "Last updated" date at the top, and email you about any significant changes.