Privacy notice

This notice explains what personal data the Tailored Access Lite app handles, and why. It is written for residents of buildings where the app is used, and for the managing agents and residents' associations who operate the system.

Who is responsible for your data

Your building's managing agent or residents' association is the data controller. They decide who is granted access and why, on their own lawful basis — normally legitimate interests in the security of the premises. If you have a question about your access, or want your details corrected or removed, please contact them first.

Security Tailors Ltd supplies the system. Depending on the arrangement your building has chosen, we may act as their data processor under a written agreement, or purely as a software supplier with no access to resident data at all.

What the app holds, and why

Data	Why	Kept for
Your name, and the flat or unit you are associated with	To confirm you are entitled to access, and to record openings against the right person	While you hold access
Email address, where given	So you can request a new access code yourself if you change or reinstall your phone	While you hold access
A key created on your phone	Proves a request came from your device. The private part is generated inside your phone's secure hardware and never leaves it — we never hold anything that could open a gate on your behalf	While registered
A record of each opening: who, which gate, and when	The access record. It is the reason the system exists	A period set by your building, typically 12 months

What the app does not do

• It does not collect or use your location.
• It does not access your contacts, photos, messages, files or call history.
• It contains no advertising and no advertising networks.
• It contains no analytics or tracking of your behaviour.
• Nothing is sold, and nothing is shared with third parties for marketing.

Where your data is held

Resident records are held on equipment installed at your own building, not pooled into a shared database covering multiple clients. Traffic between your phone and your building's system is encrypted, and passes through Cloudflare, which provides that secure connection.

Where your building has enabled it, an email address you have given may be used to send you an access code. That address is handled in order to send the message and is not stored or used for any other purpose.

Your rights

You can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, or object to how it is used. Address these to your building's management as the controller; we will assist them.

Two practical points. Your own access history is visible in the app at any time, which answers most requests immediately. And where you ask for erasure, your personal details can be removed while the security record itself is retained for the remainder of its retention period — the standard approach where a building has audit obligations.

You may also complain to the Information Commissioner's Office (ico.org.uk).

Security

• Requests are signed with a key held in your phone's secure hardware. Passwords are not used to open gates.
• Each request works once only, so a captured request cannot be re-used.
• The equipment at your building accepts no inbound connections from the internet.
• Registrations expire after 12 months unless renewed, and a lost phone can be revoked immediately without affecting anyone else.

Children

Where a child uses a fob rather than the app, it is recorded against the adult responsible for it, as with a house key. The record identifies the credential and the responsible person, not the child.

Changes and contact

We will update this notice as the app changes, and the date at the top shows when. For questions about the app itself:

Security Tailors Ltd
27A Beechwood Avenue, Greenford, London UB6 9UB
Registered in England and Wales, company number 13506576
jarkko.nivakoski@gmail.com