Drifthome Privacy Notice
Effective date: 18th November 2025
Controller: Drifthome Technologies Ltd (“drifthome”, “we”, “us”).
Registered address: 167-169 Great Portland Street, Fifth Floor, London, Greater London, England, W1W 5PF.
Contact (Data Protection Officer): dpo@drifthome.ai
Full Privacy Policy: https://drifthome.ai/privacypolicy/
Cookie Policy: https://drifthome.ai/cookiepolicy/
What we collect
- Account & contact details (name, email, phone); login/authentication data.
- User content you choose to upload, e.g., property images and related notes/metadata.
- Device & usage data (IP address, pages/screens viewed, crash/performance telemetry).
- Support communications and (if you opt in) marketing preferences.
- Payments: handled by our payment provider; we receive limited transaction metadata (no full card details).
- Equity & optionholder data (if you are a shareholder/ESOP participant/advisor): identity and contact details; role/relationship to Drifthome; grant/award details; vesting schedule/status; exercise/transfer records; cap‑table identifiers; and limited tax identifiers needed to administer the plan.
Why we use your data & lawful bases
- Provide and secure the service (create/manage your account, store images, prevent fraud, ensure reliability) — Contract and Legitimate interests.
- Customer support & service communications — Contract and Legitimate interests.
Equity/option plan administration & investor relations (cap table, registers, filings): Contract; Legal obligation; and Legitimate interests.
- Analytics/telemetry (non-essential cookies/SDKs) — Consent (only after you opt in via Cookie Settings).
- Marketing (email/SMS) — Consent (withdraw any time).
- Legal & compliance — Legal obligation.
Sharing
We use trusted service providers under contract (e.g., Microsoft Azure hosting & observability, communications, payments). We do not sell personal data.
We may also share limited optionholder information with equity plan administrators/cap‑table platforms, professional advisers (lawyers, accountants, auditors), banks/registrars, and public authorities (e.g., Companies House and HMRC) where required.
International transfers
Where data is transferred outside the UK/EEA, we use appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses (SCCs) with the UK Addendum, plus transfer risk assessments. Copies available on request.
Retention
- Account data: while your account is active, then 12 months.
- Uploaded images/content: until you delete or 24 months after inactivity.
- Security logs/telemetry: 12–24 months.
- Marketing consents/opt-outs: as needed to honour your choices.
Equity/optionholder records: for the life of the option/equity and 6–10 years thereafter to meet legal/tax requirements and to establish/defend legal claims.
Your rights
Access, rectification, erasure, restriction, objection (including to legitimate-interests processing and to direct marketing), and data portability. Withdraw consent at any time (cookies via Cookie Settings; emails via Unsubscribe). You may complain to the UK Information Commissioner’s Office (ICO) or your local authority.
Children
Our services are not directed to children. If consent is ever required for online services offered to children, the UK age is 13 (up to 16 in some EU countries).
Automated decisions
We do not make decisions with legal or similarly significant effects based solely on automated processing.