Privacy notice

Last updated: 15 October 2026

Before public launch: this is a working template, not legal advice. Replace every bracketed item, confirm actual processing practices and obtain appropriate UK data-protection advice before accepting customers or personal data.

1. Who we are

ProCo is operated by [insert legal business or proprietor name] (“we”, “us” and “our”). Contact: [insert privacy contact email]. Business address: [insert business address, where legally required].

2. Information we process

Depending on how you use the service, we may process account details such as your name and email address; property and tenancy records you enter; compliance and maintenance records; documents you upload; support messages; and technical information needed to operate and secure the service.

Please only upload information you are entitled to provide. Avoid uploading identity documents or other highly sensitive personal information unless the service expressly supports it and you have an appropriate lawful basis.

3. Why we use information

We use information to create and secure accounts, provide the ProCo workspace, store and retrieve your records, provide support, maintain service reliability, prevent abuse, and meet applicable legal obligations. If paid subscriptions are introduced, we will also process subscription and billing status through our payment provider.

4. Legal bases

Where UK data-protection law applies, the legal basis will depend on the purpose and circumstances. It may include performing a contract, legitimate interests, complying with a legal obligation, or consent where consent is required. We will document the relevant bases before launch.

5. Property and tenant information

You remain responsible for deciding what tenant or third-party information to enter and for ensuring you have a lawful basis to use it. You should provide any privacy information required to those individuals. ProCo is an organisational tool and does not determine your legal compliance.

6. Service providers and international transfers

We use third-party infrastructure providers to operate the service, including Supabase for authentication, database and document storage, and hosting providers for the website. If payment processing is enabled, the chosen payment provider will process relevant billing data. Confirm the current providers, their roles, data locations and transfer safeguards before launch.

7. Retention and security

We retain information for as long as needed to provide the service, meet legal obligations, resolve disputes and enforce agreements. We use access controls and account-scoped permissions, but no internet service can promise absolute security. Final retention periods, backup handling, incident response and deletion procedures must be documented before launch.

8. Your rights

Depending on the circumstances, you may have rights to access, correct, delete, restrict or object to processing, and to data portability. You may also complain to the UK Information Commissioner's Office. Contact us using [insert privacy contact email] to make a request.

9. Cookies and analytics

Document any analytics, advertising, session or other non-essential cookies used by the production site. If non-essential cookies are used, implement an appropriate consent mechanism before they are set where required.

10. Changes and contact

We may update this notice as the service changes. The effective date will be shown at the top. Privacy questions: [insert privacy contact email].