Privacy Policy
Last updated: January 2026
Norbury Property Services ("we", "our", or "us") operates the To Let mobile application. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and UK data protection laws.
1. Data Controller
Norbury Property Services is the data controller responsible for your personal data. For any privacy-related inquiries, contact us at: privacy@norburypropertyservices.com
2. Data We Collect
We collect and process the following categories of personal data:
- Account Information: Name, email address, phone number, and password (encrypted)
- Property Data: Property addresses and maintenance request details
- Photos and Media: Images you upload for maintenance requests (using your device camera with permission)
- Location Data: Property locations for navigation purposes (with your consent)
- Device Information: Device type, operating system, and app version for troubleshooting
- Contractor Information: Business details, invoices, and work history
3. Legal Basis for Processing
We process your data based on:
- Contract Performance: To provide property management services
- Consent: For camera access, location services, and notifications
- Legitimate Interests: To improve our services and prevent fraud
- Legal Obligations: To comply with applicable laws and regulations
4. How We Use Your Data
- Process and manage maintenance requests
- Coordinate between tenants, property managers, and contractors
- Generate invoices and financial records
- Send notifications about request status updates
- Provide navigation to property locations
- Improve our services through usage analytics
5. Data Sharing
We may share your data with:
- Service Providers: Cloud hosting (secure EU-based servers), mapping services
- Contractors: Relevant job details to assigned maintenance contractors
- Property Managers: Tenant maintenance requests and status
We do not sell your personal data to third parties.
6. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Typically:
- Account data: Until account deletion plus 30 days
- Maintenance records: 7 years for legal compliance
- Invoices: 7 years for tax purposes
7. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time
For more information, visit our website at norburypropertyservices.com
To exercise these rights, contact us at norburyproperty@btinternet.com
8. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure authentication with password hashing
- Regular security assessments
- Access controls and audit logging
9. International Transfers
Your data is primarily stored and processed within the UK/EU. If transferred outside, we ensure adequate protection through Standard Contractual Clauses or equivalent safeguards.
10. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via the app or email.
12. Contact & Complaints
For privacy inquiries or to lodge a complaint: