Privacy

Who we are

HMO44 is operated by Rajoka Limited, company number 12069067, of 64b Yardley Green Road, Birmingham, England, B9 5QE. We are registered with the Information Commissioner’s Office under reference ZA837360. For anything in this notice, write to [email protected].

The two kinds of information here

Your account. The email address you sign in with, the name and phone number an owner records for a worker, and your organisation details. We use these to run the account and to send you the emails the service depends on, such as an invitation or a password reset.

Your records. Everything you enter about your properties and the people living in them. This includes information the law treats as special category, because the support forms ask about health, mental health, offending history and substance use. We hold this only so that you can record it, read it back and produce the documents you need from it.

Who is responsible for the resident records

You are. As the provider you decide what is recorded about a resident, why, and how long it is kept, which makes you the controller of that information. We hold and process it on your instructions, which makes us your processor. We do not decide what goes into a resident file and we do not use it for any purpose of our own.

For your own account information we are the controller, and our basis is that we need it to provide the service you asked for.

Who can see what

Access is enforced by the database, not only by the screens. An owner sees their organisation. A support worker sees only the properties and residents that owner has given them, and nothing else on the account. Nobody sees another organisation.

Our staff do not browse your records. Access for support happens only when you ask for help and only for as long as that takes.

Where it is kept

Your records are stored in a managed Postgres database and private file storage provided by Supabase, in Ireland, and the service runs on Vercel, also in Ireland. Emails are sent through Resend. Cloudflare sits in front of the service and the analytics described under Cookies. Files you upload, such as a photograph of a certificate, are held privately and are reachable only through a short lived link issued to somebody who is entitled to see them.

How long we keep it

For as long as your account is open. Compliance and support records often have to be kept for years after a resident leaves, and that decision is yours rather than ours, so we do not delete them on a schedule of our own.

Close your account and tell us, and we will delete your records within 30 days, other than anything we are required to keep. Ask us for a copy first and we will provide it.

Cookies

One cookie, which keeps you signed in. There is no advertising and no tracking of individuals. We count visits to our public pages (home, pricing, FAQ, sign in and sign up) with Plausible, which sets no cookies and keeps no personal data about you. It is self-hosted on Rajoka infrastructure, United Kingdom, and traffic to it passes through Cloudflare. It is not run on the screens that hold your records, so there is nothing here to consent to or to turn off.

Your rights

You may ask us for a copy of your account information, ask us to correct it, or ask us to delete it. If a resident asks you to do the same with their record, that request is yours to answer and we will help you carry it out.

If you think we have handled information badly, tell us first at [email protected]. You can also complain to the Information Commissioner at ico.org.uk.