GDPR & Data Rights

Property Management Network is committed to protecting personal data and to complying with the General Data Protection Regulation (Regulation (EU) 2016/679) (the GDPR) and the United Kingdom General Data Protection Regulation (the UK GDPR) where applicable. This page explains the rights available to individuals whose personal data we process and how those rights may be exercised in connection with Property Management Network.

Subject to the conditions in Applicable Data Protection Law, you have the following rights:

• Right of access— to obtain confirmation of whether we process your personal data and to receive a copy of it.
• Right to rectification— to have inaccurate personal data corrected and incomplete data completed.
• Right to erasure— to have your personal data deleted in certain circumstances.
• Right to restriction of processing— to limit how we process your personal data in certain circumstances.
• Right to data portability— to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object— to object to processing that relies on our legitimate interests.
• Right to withdraw consent— where processing is based on consent, to withdraw that consent at any time.
• Right to lodge a complaint— to lodge a complaint with a supervisory authority.

We process personal data on one or more of the following legal bases, depending on the context:

• Contract— where processing is necessary to provide the Service you have requested.
• Legitimate interests— where processing is necessary for our legitimate interests, such as securing and improving the Service, provided those interests are not overridden by your rights.
• Consent— where you have given consent for a specific purpose.
• Legal obligation— where processing is necessary to comply with a legal obligation to which we are subject.

Personal data is stored in a managed PostgreSQL database hosted on DigitalOcean, with an EU region available. Uploaded files are stored privately in DigitalOcean Spaces. Access isolation is enforced at the application layer: every request is authenticated and scoped to the relevant account so that data is not accessible to other users. Where personal data is transferred to a country that has not been recognized as providing an adequate level of protection, the transfer is protected by Standard Contractual Clauses or another lawful transfer mechanism.

We retain personal data for as long as it is needed to provide the Service. Upon deletion of an account, associated personal data is deleted within 30 days, except where a longer retention period is required by law (for example, certain financial records that must be kept for tax purposes).

In the event of a personal-data breach, we notify affected users and, where required, the relevant supervisory authority within 72 hours of becoming aware of the breach, consistent with Article 33 of the GDPR.

We use vetted third-party sub-processors to help operate the Service. Our current sub-processors are listed on our Sub-processors page, and the terms governing their engagement are set out in our Data Processing Addendum.

You can exercise the most common rights yourself, instantly, from Settings → Privacy & Data in your dashboard:

• Access & portability— download a complete, machine-readable JSON export of your personal data and portfolio records.
• Erasure — delete your account. Deletion is scheduled 30 days out (during which you can cancel), after which your account, data, and uploaded files are permanently erased and any active subscription is cancelled.
• Rectification — correct your details at any time in Settings → Profile.

For any other request, contact us at privacy@propertymanagement.network. For data-protection matters, you may also contact our data-protection team at dpo@propertymanagement.network. You also have the right to lodge a complaint with your local supervisory authority (for example, the Information Commissioner’s Office in the United Kingdom, or your national data-protection authority in the European Union).

Where you use the Service to manage the personal data of your Tenants, you act as the data controller and we act as the data processor, processing that personal data on your documented instructions under our Data Processing Addendum. Where we process your own account data, we act as a controller, as described in our Privacy Policy.

If you have questions about this policy, contact us at dpo@propertymanagement.network.

Property Management Network