Privacy Policy
Homeasy is currently in a pre-launch and closed-loop demo phase. This notice explains what personal data we use now, why we use it, and the choices available to you.
We collect only what we need to run the website, answer enquiries and operate an agreed demo. We do not sell personal data. AI may help prepare or organise information, but it does not make solely automated decisions with legal or similarly significant effects.
Who is responsible for your data
HOMEASY LTD (company no. 17117091, registered in England and Wales) is the controller for the personal data described in this notice. Contact us at admin@homeasy.co.uk.
What we collect
- Enquiries: your name, email address, organisation, role, and anything you choose to include in a message.
- Website and security data: limited technical information such as IP address, browser or device information, request time, and security events generated by our hosting providers.
- Controlled demo data: account, authentication, role, invite and usage information needed to give approved participants scoped access.
- Information from another person: in a controlled pilot, an authorised participant may provide limited case or invite information about another party. We will provide the relevant privacy information when required.
The public website does not currently run a live waiting-list database. The demo primarily uses representative case records. Do not upload or email real customer or transaction data unless we have explicitly agreed a controlled pilot with suitable terms and notices in place.
Why we use it and our lawful bases
- To answer an enquiry or take requested pre-contract steps: performance of a contract or steps at your request before entering one.
- To operate, secure and improve the website and controlled demo: our legitimate interests in running a safe, useful service and preventing misuse.
- To manage an agreed pilot or partnership: performance of a contract and our legitimate interests in managing the relationship.
- To send optional product updates: consent, where we ask for it. You may withdraw consent at any time.
- To meet tax, corporate, security or regulatory duties: compliance with a legal obligation where it applies.
Who we share it with
We do not sell personal data. We may share only what is necessary with:
- hosting, security, authentication, email and other technology providers acting for us;
- professional advisers, auditors, insurers or authorities where appropriate or legally required; and
- a solicitor, broker, surveyor or other transaction participant only after the relevant access, purpose and sharing step has been made clear.
The current hosting design uses AWS infrastructure in London. The public website also requests font files from Google Fonts, which receives technical request information such as an IP address. Providers may use support teams or sub-processors outside the UK. Where a restricted international transfer applies, we require an appropriate UK GDPR transfer mechanism and safeguards; contact us for more information about the applicable safeguard.
How long we keep it
- Enquiries and pre-launch correspondence: while the conversation or relationship is active, followed by periodic review and deletion when it is no longer reasonably needed for follow-up, legal claims or corporate records.
- Demo accounts and associated personal data: for the approved demo or pilot, then deleted or anonymised after access closes, subject to a 30-day deletion process and any necessary security or legal hold.
- Security and audit records: only for the period reasonably required to protect the service, investigate an event and meet an applicable legal duty.
If Homeasy moves into live transactions, some records may need a longer statutory or professional retention period. We will give participants a service-specific notice before collecting that data.
Your rights
Depending on the circumstances, you may ask us for access to your personal data, correction, deletion, restriction, or portability. You may also withdraw consent at any time.
You have the right to object to processing based on our legitimate interests, and to direct marketing at any time. Email admin@homeasy.co.uk to exercise a right. We may need to confirm your identity and will normally respond within one month.
AI and automated decisions
Homeasy may use AI to extract, organise, summarise or flag information for review. The accountable professional remains responsible for legal, lending, advice and survey conclusions. We do not currently use solely automated processing to make decisions that have legal or similarly significant effects on individuals.
Complaints
Please contact us first so we can try to resolve your concern. You can also complain to the UK Information Commissioner's Office through its data protection complaints service.
Changes to this notice
We will review this notice as the product changes. If we plan a materially different use of personal data, we will update the notice and bring the change to affected people before that use begins.