Legal

Last updated: January 2025

Data Protection Officer

dpo@sortx.app

Legal Inquiries

legal@sortx.app

1. Introduction

SortX ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our property maintenance management platform.

We are a UK-based company and fully comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection legislation.

2. Data Controller

SortX is the data controller for the personal data processed through our platform. If you have any questions about this policy or our data practices, please contact our Data Protection Officer at dpo@sortx.app.

3. Information We Collect

We collect and process the following categories of personal data:

  • Account Information: Name, email address, phone number, and organisation details when you register for our service.
  • Property Data: Property addresses, tenant information, and landlord details necessary for managing repairs.
  • Communication Data: Messages, call recordings (where consent is provided), and correspondence through our platform including WhatsApp, SMS, and web chat.
  • Repair Records: Details of maintenance requests, contractor assignments, quotes, invoices, and work completion records.
  • Usage Data: Information about how you interact with our platform, including log data and analytics.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract: Processing necessary to perform our contract with you or to take steps at your request before entering into a contract.
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and preventing fraud.
  • Legal Obligation: Processing necessary to comply with legal requirements, including housing regulations and financial reporting.
  • Consent: Where you have given explicit consent for specific processing activities, such as marketing communications.

5. How We Use Your Data

We use your personal data to:

  • Provide and maintain our property maintenance management services
  • Process and manage repair requests and contractor assignments
  • Communicate with tenants, landlords, and contractors
  • Generate reports and analytics for your organisation
  • Ensure compliance with housing regulations and safety requirements
  • Improve our platform and develop new features
  • Prevent fraud and ensure security of our services

6. Data Sharing

We may share your personal data with:

  • Contractors: When assigning repair work, we share necessary property and contact details.
  • Service Providers: Third-party providers who help us deliver our services (e.g., cloud hosting, communication platforms).
  • Legal Authorities: Where required by law or to protect our legal rights.

We ensure all third parties provide adequate data protection safeguards and only process data according to our instructions.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Repair records are typically retained for 6 years in accordance with UK housing regulations and limitation periods.

8. Your Rights

Under UK GDPR, you have the following rights:

  • Right of Access: Request a copy of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure: Request deletion of your data in certain circumstances.
  • Right to Restrict Processing: Request limitation of how we use your data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests.
  • Rights Related to Automated Decision-Making: Request human review of automated decisions.

To exercise any of these rights, please contact our Data Protection Officer at dpo@sortx.app.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.

10. International Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office (ICO) or transfers to countries with adequate data protection laws.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through our platform. We encourage you to review this policy periodically.