Privacy policy

This explains what personal information noddzzz collects, why, and your rights. noddzzz is run by Gallos Group Ltd, a company registered in England and Wales. Questions or requests: hello@usenodd.co.uk.

Two different roles

• We decide how your information is used (we’re the controller) for people who sign up or are invited to noddzzz, and for visitors to our website.
• The letting agency decides (they’re the controller, we’re their processor) for information an agency puts into noddzzz about owners, landlords, tenants and engineers, and for documents sent through an upload link. If you’re an owner, landlord or tenant, the agency’s own privacy notice applies, and they’re who to contact first.

What we collect, and why

• Your account: your name, work email, the agency you work for, your role, and a scrambled (hashed) version of your password. We use these to give you access, to show who checked each certificate, and to contact you about your account. Lawful basis: our contract with your business, and our legitimate interest in running a secure service.
• What you do in noddzzz: who added, changed, approved or turned down each record, and when. This history is kept for as long as the home and the account are in noddzzz, so an agency can show who did what and when. Deleting a home deletes its history. Lawful basis: legitimate interests.
• If you send a document through an upload link: your name, the document and its dates go to the agency that sent you the link. We hold them on the agency’s behalf.
• If you join the waiting list: your name, agency, work email, roughly how many homes you manage and which kind of lets. We use them only to tell you about the launch and founding places, and delete them on request, or a year after launch if you haven’t signed up.
• The deadline checker: the postcode you type is sent to postcodes.io to find its region. We don’t keep it in our database or link it to you; it may appear briefly in our hosting provider’s technical logs.
• EPC lookups: when an agency checks the EPC register, the home’s postcode is sent to the government’s EPC data service.
• Basic technical logs kept by our hosting provider, such as IP addresses and errors, for security and fixing problems, for a short time.

Cookies

We use one cookie, which keeps you signed in. It’s strictly necessary, so it doesn’t need consent. We don’t use advertising or tracking cookies in the app.

Who we share it with

We never sell personal information. We use these suppliers to run noddzzz, under contracts that protect your data:

• Vercel Inc.: Hosts the website and app (USA and worldwide edge network)
• Neon Inc. (Databricks): Database, including uploaded documents (Cloud region chosen by us)
• GitHub Inc. (Microsoft): Stores our source code (no customer data) (USA)
• Resend Inc.: Will send reminder and account emails, once email is switched on (not yet) (USA and EU)
• Anthropic PBC: Will read uploaded certificates to suggest the type and dates, once switched on (not yet) (USA)
• postcodes.io (the deadline checker) and the GOV.UK EPC data service, as described above
• Google Fonts, which serves the typefaces on our pages; your browser’s IP address is sent to Google when they load

We do create anonymised, grouped statistics about rented homes, such as average rents and how often homes are booked in an area, from information agencies put into noddzzz. They’re only produced from enough homes and agencies that no person, home or agency can be identified, and we may publish, share or sell them.

Where data is processed outside the UK, it’s protected by UK adequacy regulations or the UK’s approved data transfer agreements. We may also share information if the law requires it.

How long we keep it

Account details are kept while the account is open and for 30 days after it closes. The history of who checked what stays with the agency’s records for the same period, even if a person leaves the agency. Invoices are kept for six years, as tax law requires.

Your rights

You can ask to see the information we hold about you, correct it, delete it, limit or object to how we use it, or receive a copy to take elsewhere. Email hello@usenodd.co.uk and we’ll reply within a month. For information an agency holds about you, ask the agency, and we’ll help them.

If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to sort it out first.

Changes

If we change this policy in a way that matters, we’ll tell account owners by email. See also our terms of service.