Home/Legal/Privacy Policy

Privacy Policy

How we collect, use, and protect your personal data.

Last updated: January 2026

1. Introduction

Damp and Mould Ltd ("DMS", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and services.

We are the data controller for personal data processed through our services. Our registered address is in the United Kingdom.

2. Information We Collect

2.1 Information You Provide

  • Account information: Name, email address, organisation, job title, phone number
  • Property information: Property addresses, portfolio details, tenant contact information (where provided by landlords/agents)
  • Communications: Enquiries, support requests, feedback
  • Payment information: Processed securely through our payment provider (we do not store full card details)

2.2 Information Collected Automatically

  • Environmental sensor data: Temperature, humidity, CO2, VOC levels, water presence (from installed sensors)
  • Device information: Sensor IDs, hub IDs, connectivity status
  • Usage data: Dashboard access logs, feature usage (with consent for analytics)
  • Technical data: IP address, browser type, device type (for security and functionality)

3. How We Use Your Information

We use your information for the following purposes:

  • Service delivery: Operating the DMS platform, processing sensor data, generating reports
  • Communication: Sending alerts, responding to enquiries, service updates
  • Improvement: Analysing usage to improve our services (with consent)
  • Compliance: Meeting legal obligations, responding to lawful requests
  • Security: Protecting our systems and detecting fraud

4. Legal Basis for Processing

We process personal data under the following legal bases:

  • Contract: Processing necessary to provide our services
  • Legitimate interests: Security, fraud prevention, service improvement
  • Consent: Marketing communications, analytics cookies
  • Legal obligation: Compliance with applicable laws

5. Data Sharing

We may share your data with:

  • Service providers: Cloud hosting, payment processing, email delivery (under data processing agreements)
  • Within your organisation: Other users within your organisation's account as configured
  • Legal requirements: When required by law or to protect our rights

We do not sell your personal data to third parties.

6. Data Retention

We retain data for as long as necessary to provide our services and comply with legal obligations:

  • Account data: Duration of account plus 2 years
  • Sensor data: As configured in your subscription (typically 2-10 years)
  • Support communications: 3 years
  • Financial records: 7 years (legal requirement)

7. Your Rights

Under UK GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data (subject to legal retention requirements)
  • Restriction: Limit how we use your data
  • Portability: Receive your data in a structured format
  • Object: Object to processing based on legitimate interests
  • Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at privacy@dmsmonitor.uk.

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS 1.2+), encryption at rest (AES-256), access controls, and regular security assessments.

9. International Transfers

Your data is primarily stored in UK-based infrastructure. If we transfer data outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

10. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification.

12. Contact Us

For privacy-related enquiries:

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

This privacy policy is provided for informational purposes and does not constitute legal advice. Consult a qualified legal professional for advice specific to your situation.