Legal
Privacy notice
This covers personal data we control: visitors to this site, people who enquire, and people who hold accounts. Personal data you put into DutyHub about your own staff and contractors is yours — you are the controller and we process it for you. See Data protection.
Who we are
- Controller: ActiveManage Ltd, company number to be confirmed
- Registered office: to be confirmed
- ICO registration: to be confirmed
- Contact for data protection: to be confirmed
What we collect, and why
If you use the free tier checker
The checker records the answers you give about a premises and the result it produced, including the version of the rules that produced it, so the same answers can be shown to produce the same result later.
You do not have to give an email address to see your result. If you choose to give one so we can send it to you, we use it for that. We will only send you marketing if you separately and actively opt in — the box is not pre-ticked, and declining it does not change the result you see. Our lawful basis for sending the result is your consent, and you can withdraw it at any time.
If you enquire or become a customer
We collect the contact and account details needed to answer you, provide the service, take payment and keep the records a business has to keep. The lawful basis is performance of a contract, or our legitimate interest in responding to an enquiry you made, and for some records a legal obligation.
If you use the application
We hold account details, security information such as two-factor settings, and access logs and audit records. The audit trail is a core part of what the product is for, so it is not optional and it is deliberately tamper-evident.
Cookies and analytics
This site uses a consent manager. Nothing non-essential runs before you choose, and the site works fully with analytics declined — that is tested rather than assumed. Essential cookies keep you signed in and protect forms against cross-site request forgery.
Who we share it with
Our sub-processors, listed at Sub-processors, and nobody else, unless we are required to by law. We do not sell personal data and we do not share it for anybody else's marketing.
Where it is held
On Amazon Web Services. Hosting region: to be confirmed. Where any transfer outside the UK is involved, it is covered by an appropriate safeguard, and the sub-processor list states the location for each.
How long we keep it
- Tier checks: kept while they are useful to you and to us, and disposed of on a schedule. If you gave an email address and later ask us to remove it, we remove it.
- Enquiries: kept for a reasonable period after the conversation ends.
- Customer records: kept for the contract and for as long afterwards as tax and accounting rules require.
- Audit records: retained according to the schedule configured for the account, because their value is precisely that they are not deleted casually.
Your rights
You have the right to access your personal data, to have inaccurate data corrected, to have it erased in some circumstances, to restrict or object to processing, and to portability. Where we rely on consent you can withdraw it at any time. Ask at to be confirmed and we will respond within one month.
You can also complain to the Information Commissioner's Office. We would rather you raised it with us first, but that right does not depend on it.
Changes
If we change this notice materially we will say so here and, where it affects people who hold accounts, tell them directly rather than relying on them noticing.