Book a Free Call
← Back to BlockHub52

Privacy Policy

Last updated: 29 June 2026

This Privacy Policy explains how BlockHub52 collects, uses, and protects personal information when you use our website at blockhub52.co.uk, our application at blockhub52.ai, or sign up to receive our newsletter. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

BlockHub52 is a trading name of StreamshareDM OÜ, a private limited company incorporated in Estonia (registration number 17039398). We provide compliance and service charge management software for self-managing residential block directors in the United Kingdom. For the purposes of UK data protection law, StreamshareDM OÜ is the data controller of the personal data described in this policy.

Contact: team@blockhub52.co.uk

What Data We Collect and Why

1. Account Registration and Authentication

  • Full name and email address
  • Encrypted password (we never see your plain-text password)
  • Account creation date and login history

Lawful basis: Contract — necessary to provide you with access to the BlockHub52 application.

2. Billing and Payments

  • Payment card details — collected and stored securely by Stripe (our payment processor). We never store card numbers on our servers.
  • Billing address, invoice history, and subscription status
  • Trial start date and conversion date

Lawful basis: Contract — necessary to process your subscription and comply with financial record-keeping obligations.

3. Building and Company Data

  • Building name and address
  • RTM company name and Companies House registration number (looked up via the public Companies House API)
  • Financial year start date and freeholder details
  • Building bank account details (account name, bank, sort code, account number) — used solely to populate service charge demand notices sent to leaseholders

Lawful basis: Contract — necessary to provide the core features of the application.

4. Director and Team Member Data

  • Names and email addresses of co-directors and building members you invite to the platform
  • Role assignments and access permissions
  • Invitation tokens and acceptance dates

Lawful basis: Contract — necessary to provide multi-user access to your building account. You are responsible for ensuring invited individuals are aware their details are being added to the platform.

5. Leaseholder Data

  • Leaseholder names, contact details, and unit assignments that you enter into the application
  • Lease terms, payment records, and outstanding balances

Lawful basis: Legitimate interests — you (as the data controller for your building) enter this data to manage your legal obligations as an RTM director. BlockHub52 acts as a data processor on your behalf for this category of data. See the "BlockHub52 as Data Processor" section below.

6. Compliance and Document Data

  • Compliance items, due dates, responsible persons, and status history
  • Documents you upload (certificates, reports, notices)
  • All changes are logged with a timestamp and the user who made them

Lawful basis: Contract and legitimate interests — to provide compliance tracking and maintain the audit trail required by RTM company governance obligations.

7. Service Charge Data

  • Annual budgets, instalment schedules, and demand amounts per unit
  • Payment records and outstanding balance tracking
  • Demand notices generated by the platform

Lawful basis: Contract — necessary to provide service charge management features.

8. Communications

  • Emails sent to you via Resend (our transactional email provider): welcome emails, service charge demand notices, compliance reminders
  • If you contact us via live chat (Crisp), the content of that conversation is stored by Crisp on our behalf
  • If you subscribe to our newsletter or download resources, your email is stored with Sender.net (our email marketing platform)

Lawful basis: Contract (transactional emails); Legitimate interests or Consent (marketing emails — you may unsubscribe at any time).

9. Website Usage Data

  • Pages visited, browser type, device type, and approximate location (country/city level)
  • This data is collected via cookies and standard web analytics

Lawful basis: Legitimate interests — to understand how our website is used and improve it.

10. Session and Audit Logs

  • Login timestamps and session activity within the application
  • A complete audit log of all changes made within each building account

Lawful basis: Legitimate interests — to maintain security, detect misuse, and provide directors with a reliable record of activity.

BlockHub52 as a Data Processor

When you enter leaseholder data, building data, or other third-party personal data into BlockHub52, you are the data controller for that data and BlockHub52 acts as your data processor. This means:

  • You are responsible for having a lawful basis to enter that data and for informing leaseholders that their data is managed using BlockHub52
  • We process that data only on your instructions (by operating the platform)
  • We will assist you in responding to data subject rights requests relating to data you have entered
  • We will notify you promptly in the event of a data breach affecting data you have entered

A Data Processing Agreement (DPA) is available on request at team@blockhub52.co.uk.

Third-Party Services We Use

  • Supabase — database, authentication, and file storage (servers in EU)
  • Vercel — application hosting (servers in EU/UK)
  • Stripe — payment processing (Stripe Privacy Policy)
  • Resend — transactional email delivery
  • Sender.net — email marketing and automation (Sender.net Privacy Policy)
  • Crisp — live chat support, data stored in the EU (Crisp Privacy Policy)
  • Companies House API — public company lookup (no personal data sent, only company numbers)

All third-party providers are required to handle data in accordance with UK GDPR and have appropriate data processing agreements in place.

How Long We Keep Your Data

  • Account data: retained for the duration of your subscription plus 2 years after account closure
  • Billing records: retained for 7 years to comply with HMRC record-keeping requirements
  • Building, compliance, and service charge data: retained for the duration of your subscription plus 6 years, in line with standard limitation periods for legal claims
  • Audit logs: retained for 6 years
  • Marketing emails: retained until you unsubscribe or request deletion
  • Live chat transcripts: retained for 12 months

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — ask us to correct inaccurate data
  • Right to erasure — ask us to delete your data (subject to legal retention obligations)
  • Right to restriction — ask us to pause processing of your data in certain circumstances
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interests or for direct marketing

To exercise any of these rights, email us at team@blockhub52.co.uk. We will respond within one calendar month.

Data Security

  • Encryption of data in transit (TLS) and at rest
  • Row-level security controls so each user can only access their own building data
  • Access controls limiting which team members can access which buildings
  • Regular automated database backups with point-in-time recovery
  • No storage of payment card numbers on our servers

In the event of a personal data breach likely to result in risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected users without undue delay.

Cookies

  • Strictly necessary: authentication session cookies that keep you logged in to the application
  • Analytics: anonymous usage data to help us understand how the site is used
  • Live chat: Crisp uses cookies to maintain your chat session

You can control non-essential cookies through your browser settings.

Children's Data

BlockHub52 is a professional tool intended for adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child's data has been submitted to us, please contact team@blockhub52.co.uk and we will delete it promptly.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

We would appreciate the opportunity to address your concerns directly before you contact the ICO — please email team@blockhub52.co.uk first.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. For material changes, we will notify active users by email.