This Privacy Policy explains how we collect and use personal information when you use abitat ops.

If you have questions about this policy, you can contact us at any time.

Information We Collect

We collect a small amount of information to operate the service. This may include:

Account information

• name

• email address

• organisation

If you subscribe to a paid plan, payment information is processed by a third-party payment provider (Stripe). We do not store full payment card details.

Information you upload about your sites and stock

To use the service, you upload your site metrics and the stock, reservations, and plans you build from them, including habitat details, sizes, locations, and related project information.

Information about other people that you upload

To manage a deal, you may upload information about third parties - for example a developer’s contact details, a counterparty on a reservation, or a planning application. This can include personal information about people who don’t themselves use abitat ops.

All of this is stored securely on servers in London or the EU. We use it to provide the service to you and, as set out in our Data Licence, to keep the records the service depends on.

Who is responsible for the data (controller and processor)

For your account information, abitat is the data controller.

For the information you upload about other people (such as developer contacts and counterparties), you are the controller and abitat acts as your processor - we process that information on your instructions, to provide the service. We’ll only use it for that purpose, and we can enter into a data processing agreement with you where one is needed. It’s your responsibility to have a lawful basis to share that information with us and, where appropriate, to tell those people how their data is used.

How We Use Information

We use your information to:

• provide and operate the service
• manage user accounts
• communicate important updates about the service
• process payments, including calculating your monthly usage and billing it via Stripe
• store and process the site, stock, and deal data you upload, in line with our Data Licence

We do all of this in line with UK data protection laws, on the basis of consent, legitimate interest, and where relevant the performance of our contract with you. Occasionally, we might have to process your information to comply with the law.

Data Sharing

We may share information with trusted service providers who help operate the service, such as:

• hosting providers (Fly, Cloudflare, Google, Anthropic)
• payment processors (Stripe)

These providers only receive the information necessary to perform their services.

We keep each operator’s data separate. We do not share your stock, reservations, plans, or pipeline with other operators, and we do not fold it into the market-intelligence datasets we sell through abitat intel - see our Data Licence.

We may also disclose information if required by law.

Our servers and databases are hosted in London or the EU.

Data Retention

We keep personal information only for as long as necessary to operate the service and meet legal obligations.

abitat ops keeps an immutable ledger of stock movements - an append-only financial-style record of what was reserved and sold. We keep that record for as long as we need it to give you an accurate history and to meet our legal and accounting obligations, even after individual items are cancelled. Where the law requires us to retain a record, we may not be able to delete it on request.

If you delete your account, we will remove or anonymise your personal information where we reasonably can, subject to the retention needs above.

Your Rights

Under UK data protection law, you may have rights to:

• access your personal data

• correct inaccurate information

• request deletion of your data

• object to certain uses of your data

If the request concerns information you uploaded about someone else, we may need to direct that person to you, since you’re the controller of it.

If you would like to exercise these rights, please contact us.

If you think we’ve done something wrong, you can raise this with the ICO.

Security

We take reasonable steps to protect personal information from unauthorised access, loss, or misuse.

No online service can guarantee complete security, but we work to protect your data.

Changes to This Policy

We may update this Privacy Policy from time to time.

If we make significant changes, we will provide reasonable notice through the service.

Contact

If you have questions about this policy or how your data is handled, please contact us.