Privacy Policy
Last updated: 27 September 2026
This Privacy Policy explains how HomeDash ("we", "us", "our") collects, uses, shares, and protects personal data when you use our software‑as‑a‑service (SaaS) and the website homedash.co.uk (the "Service").
1. Who we are
Wessex Investment Services Ltd is the company responsible for your personal data.
- Data Controller:Wessex Investment Services Ltd
- Registered Office:509-510 Cotton Exchange, Bixteth Street, Liverpool, L3 9LQ
- Registered In:England & Wales, Company No: 10402782
- ICO Register:Registration No: ZB298208
- Contact Email:privacy@homedash.co.uk
2. Processing on behalf of Landlords
When you (the "Customer") upload personal data relating to your tenants or contractors, you are the Data Controller and Wessex Investment Services Ltd acts as the Data Processor.
- We process this data only on your written instructions to provide the Service.
- You warrant that you have provided necessary privacy notices and obtained any required consents from tenants to share their data with us.
- We maintain strict technical security to protect this third-party data.
- When you share documents with tenants through the tenant portal, we record on your behalf when each tenant was shown, opened, downloaded or acknowledged a document: the date and time, which tenant account, which version of the document, and whether a phone, tablet or computer was used. We do not record IP addresses in this record. Tenants are told in their portal that you can see it. The record cannot be edited, and it is deleted with your account.
3. The personal data we collect
We process only the data necessary to provide a high-quality property management service:
- Account profiles (Name, Email, Job Title)
- Security data (Encrypted password hashes)
- Billing metadata (via our secure payment provider)
- Usage logs (IP address, device type, interactions)
- Tenant portal document activity (shown, opened, downloaded, acknowledged)
- Support history (Emails and chat transcripts)
- Property data uploaded by you
4. Partner offers
Inside the HomeDash app we sometimes suggest organisations that can help with something you need to do. For example, when a deposit has not been protected yet, we show the three government-approved deposit protection schemes. Every suggestion says whether HomeDash is paid for it.
- Suggestions appear in the app only. We do not send them to you by email or WhatsApp.
- When you click one, we record the click: which suggestion, when, and where in the app it was shown. We then send you to the organisation's website with a random reference code.
- The reference code contains no personal data. We do not pass your name, contact details, properties or your tenants' details to the organisation, and it cannot see which page of HomeDash you came from.
- An organisation may tell us that a reference code led to a sign-up or purchase, so we can see which suggestions are useful. We share only totals with them, never who clicked.
- If an organisation ever needed more than a reference code to help you, we would ask for your explicit consent first, for that organisation only.
- You can hide any suggestion, and the account owner can turn them off for the whole account in Settings → Notifications.
We keep these records under our legitimate interests, to measure whether suggestions are useful.
5. Cookies & Tracking
We use cookies to ensure our platform functions correctly and to understand how visitors use our site.
| Cookie | Purpose | Type |
|---|---|---|
| sb-…-auth-token | Keeps you securely signed in to the HomeDash app (app.homedash.co.uk). | Essential |
| cookie-consent | Remembers your cookie choice. Stored in your browser's local storage rather than as a cookie. | Essential |
| _ga | Google Analytics — helps us improve the platform. | Analytics |
6. Legal bases for processing
Under the UK GDPR, we rely on the following legal grounds:
Contract: Necessary to provide you with your HomeDash account.
Legitimate Interests: To improve our tools and ensure security. Under the "soft opt-in" rule, we may email you about similar HomeDash features unless you unsubscribe.
Legal Obligation: For tax, accounting, and anti-fraud purposes.
7. Data Retention
We keep your account data while your account is open. Cancelling a subscription does not delete your data; closing your account does.
When you close your account, we stop billing, revoke API access and block sign-in straight away. We keep your data for 30 days in case you change your mind, then permanently delete your account, properties, tenancies, documents, photos and other files. Our encrypted backups roll over on a three-month cycle, so the last copies are gone within about four months of closure.
Some records are kept for longer, with your email address and IP address removed:
- our activity log keeps routine events for 12 months, security events for 24 months and financial events for up to 7 years from the date of each event, for legal, tax and dispute purposes;
- we keep a minimal record that the deletion took place;
- technical logs for our API and webhooks are kept for up to 180 days.
Records of tenants being given documents through the tenant portal are kept while the landlord's account exists, because they can be needed as evidence long after a tenancy ends. They are deleted with the account.
Tenants have their own HomeDash sign-in, which is not deleted when their landlord closes an account. A tenant can ask us to delete it at any time by emailing privacy@homedash.co.uk. Accounts that are created but never verified are closed automatically after 48 hours and deleted 30 days later.
8. Your Rights
You have the right to access, correct, or delete your personal data. You can also object to processing or request data portability.
To exercise these rights, contact our privacy team at privacy@homedash.co.uk.
Note: We do not use automated decision-making or profiling that produces legal effects on you.