This Privacy Policy explains how AUDITHORITY (“we”, “us”, “our”) collects, uses and protects personal data when you visit this website, make an enquiry, or subscribe to the AUDITHORITY platform. We are committed to handling your information responsibly and in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
AUDITHORITY is an supplier of white-label building audit and compliance software to UK firms. For the purposes of data protection law, we are the data controller for the personal data described in this policy. If you have any questions about this policy or how we handle your data, contact us at info@audithority.com.
The information we collect
We collect and process the following categories of personal data:
- Enquiry details that you provide through our contact form or by email — for example your name, company, job title, email address, telephone number, the building or address concerned, the property type, the service you are interested in, the number of buildings, your preferred timing, and any message you send us.
- Correspondence — records of communications between us, including emails and notes relating to your enquiry or instruction.
- Subscription and account records — where you instruct us, information necessary to scope, deliver and record the audit, which may include details about the property and the people responsible for it.
- Technical data — limited information collected automatically when you use the website, such as your IP address and general request information, used to keep the site secure and working correctly.
- Analytics data — where you consent, aggregated information about how the website is used (see our Cookie Policy).
- Business contact details — where we contact organisations that we believe may have a use for our services, we hold work contact details such as a business name, a work email address and, where relevant, a job title. These are obtained from publicly available business sources, such as company websites and business directories.
- Marketing preferences — if you ask us to stop sending you marketing, we keep a record of your email address on a suppression list. We explain why below.
How and why we use your data
We use personal data for the following purposes, relying on the lawful bases shown:
- To respond to your enquiry and prepare a quotation — on the basis of taking steps at your request prior to entering into a contract, and our legitimate interest in responding to business enquiries.
- To provide and support the platform — on the basis of performing our contract with you, and to meet our professional obligations.
- To keep the website secure — including protecting our enquiry form against automated abuse — on the basis of our legitimate interest in the security and integrity of our systems.
- To understand and improve how the website is used — on the basis of your consent, through analytics cookies which are only set after you accept them.
- To tell organisations about our services — on the basis of our legitimate interest in marketing business-to-business services to organisations likely to have a use for them. You can stop this at any time; see Marketing emails below.
- To honour a request not to be contacted — on the basis of our legal obligation to act on your objection, and our legitimate interest in making sure we do not contact you again by mistake.
- To comply with legal and regulatory obligations — where the law requires us to retain or disclose information.
Cookies and analytics
The website uses a small number of cookies and similar technologies. Non-essential cookies, including analytics, are only used with your consent. Full details, including how to change your choice, are set out in our Cookie Policy.
Marketing emails
We sometimes email organisations to introduce our platform. We only do this where we believe the service is relevant to that organisation’s business, and we rely on our legitimate interests in doing so. We do not send marketing to people at home, and we do not sell, rent or share our contact list with anyone.
You can stop receiving these at any time, and we will act on it immediately. You can:
- click the unsubscribe link in the footer of any marketing email we send — one click, no reply needed;
- use your email program’s own unsubscribe button, where it offers one;
- enter your address in the unsubscribe box in the footer of our home page; or
- simply email info@audithority.com and ask.
You do not have to give a reason, and objecting to direct marketing is an absolute right — we cannot weigh it against our own interests. We will never ask you to confirm an unsubscribe request by email.
Why we keep your address after you unsubscribe. When you ask us to stop, we add your email address to a suppression list and keep it there. This may seem counter-intuitive, but it is the only reliable way to make sure you are not contacted again — deleting the record entirely would leave nothing to check against, and you could be added back from a later source. The list is used for that single purpose. It is never used to contact you, and it is not used for anything else.
Messages that are part of work you have asked us to do — a quotation you requested, an invoice, a report, or a reply to your enquiry — are not marketing, and unsubscribing does not stop them.
Who we share your data with
We do not sell your personal data. We share it only where necessary, and with appropriate safeguards, including with:
- Service providers that help us operate the website and our business. At present these are Supabase (application database, file storage and authentication), Hostinger (website hosting and email), Cloudflare (Turnstile bot protection on the enquiry form) and, only where you consent, Google Analytics.
- Professional advisers and authorities — where we are required to do so by law, or to establish, exercise or defend legal claims.
These providers act on our instructions under appropriate contractual terms and may only use your data for the purposes we specify.
International transfers
Some of our service providers may process data outside the United Kingdom. Where that happens, we take steps to ensure your data is protected by an adequate level of protection recognised under UK law, or by appropriate safeguards such as standard contractual clauses.
How long we keep your data
We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements. Enquiry data that does not lead to an engagement is kept for a reasonable period and then deleted. Records relating to services we provide are kept for longer in line with our professional and legal obligations.
There is one deliberate exception. If you have asked us not to send you marketing, we keep your email address on our suppression list indefinitely, because that record is what stops you being contacted again. If you would prefer us to erase it instead, tell us — but please be aware that we would then no longer have any way of recognising your address, and you could be added again from a future source.
Keeping your data secure
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. Access to data is restricted to those who need it, and sensitive credentials are stored securely and never exposed to clients.
Your rights
Under UK data protection law you have rights over your personal data, including the right to:
- be informed about how your data is used;
- access a copy of the data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data in certain circumstances;
- ask us to restrict or object to our processing;
- object to direct marketing at any time — this right is absolute, and we must stop;
- request the transfer of your data in a portable format; and
- withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, contact us at info@audithority.com. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk. We would, however, appreciate the chance to address your concerns first.
Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. Please check back periodically for the latest version.
Contact us
If you have any questions about this policy or wish to exercise your rights, please email info@audithority.com.