This policy explains what personal data Cohold collects, why, and what your rights are.
Data controller: Alexander Pezarro, trading as Cohold. Postal address available on request. Registration with the UK Information Commissioner's Office is pending.
For any privacy-related questions or to exercise your rights, email [email protected].
Waitlist sign-ups. When you enter your email address on our website, we store that address so we can email you about the Cohold launch and material changes to the service. The legal basis is your consent. You can withdraw consent at any time by emailing us or by clicking the unsubscribe link in any email we send, and we will delete your address.
Account data. When you create a Cohold account, we collect your name and email address to set up and manage your account. The legal basis is the performance of a contract.
We do not use any analytics tools, tracking scripts, or cookies on this website. We do not share your data with third parties for marketing purposes.
We do not sell your data and we do not share it for third-party marketing. We use a small number of service providers to run Cohold. They process data only on our instructions and only as needed to provide the service:
We may also disclose data to HMRC, the police, or other authorities where we are legally required to do so.
Your data is primarily stored in the United Kingdom. Where a service provider transfers personal data outside the UK or EEA, for example Stripe processing payment data or Resend processing email delivery in the United States, the transfer is protected by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or by an adequacy decision recognised by the UK government.
We use HTTPS for data in transit, encryption at rest, access controls limited to people who need it, and regular backups. No system is perfectly secure, but we take steps proportionate to the sensitivity of the data we hold.
Waitlist email addresses are kept until you ask us to remove them, or until they are no longer needed for the purpose you provided them. For example, if you do not respond to launch communications for an extended period, we may delete your address.
Account data is kept for as long as your account is active. After your account closes, we keep the minimum data required to comply with HMRC self-assessment record-keeping rules. This is typically 5 years and 10 months from the end of the relevant tax year, after which we delete it.
You have the right to:
To exercise any of these rights, email [email protected]. We will respond within one month, as required by UK GDPR. For complex or numerous requests we may extend this by up to two further months and will tell you if we do.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
Cohold is intended for adults using it to manage rental property they co-own. The service is not directed at children under 18 and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
We may update this policy from time to time. The date at the top of this page will always reflect when it was last changed. Significant changes will be communicated by email if we hold your address.