Rezidomestics · Moby
Privacy notice
Last updated 6 August 2026
Getmaksolutions Limited (company number 13567768), trading as Rezidomestics, operates Moby, a property operations platform. Our registered office is 8 Manser Road, Rainham, Essex, RM13 8NL. We are registered with the UK Information Commissioner's Office under ZC215066.
We act in two different roles, and which one applies changes your rights. When an organisation uses Moby to run its properties, that organisation decides what to record about its residents, contractors and customers — it is the controller, and we are its processor. When you deal with us directly — visiting this site, enquiring, holding an account with us, being invoiced by us — we are the controller.
If you are a resident, tenant, customer or contractor of an organisation using Moby
The organisation you deal with decides what data is held about you and for how long. We process it only on their documented instructions. Requests to see, correct or delete that data should go to them first — they can act on it directly, and we support them in doing so. If you cannot identify or reach them, contact us at privacy@moby.living and we will route the request.
Data we hold as controller
- Account data — name, work email, phone number, the organisation you belong to, your role, and the record of when you signed in.
- Enquiry data — anything you type into a contact or demo request form on this site, and the email address you sent it from.
- Billing data — the subscription an organisation holds, invoices we issue, and payment status. Card details are handled by Stripe and never reach us.
- Technical data — IP address, browser and device type, pages requested, and error diagnostics when something fails.
- Security data — an audit record of sign-ins, failed sign-in attempts, permission changes and other significant actions.
Why we process it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Providing the platform to an organisation that has contracted for it | Performance of a contract |
| Billing, collection and financial records | Contract, and legal obligation for accounting records |
| Keeping accounts secure — rate limiting, two-factor authentication, the audit trail | Legitimate interests: preventing unauthorised access |
| Diagnosing errors and monitoring availability | Legitimate interests: keeping a paid service working |
| Responding to an enquiry you sent us | Legitimate interests: replying to someone who contacted us |
| Loading address lookup while you type an address | Consent, asked for at the point of use |
Who we share it with
We do not sell personal data and we do not use it for advertising. We disclose it to the service providers listed in our sub-processor register, each under a written contract limiting them to processing on our instructions; to professional advisers and auditors where necessary; and to authorities where the law requires it.
Where the data is held
The platform runs in the United States, so personal data originating in the UK or the EEA is transferred there. Those transfers are made under the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, together with the technical measures described in our security statement. Messaging for UK and EU organisations is delivered through our messaging provider's Irish region.
How long we keep it
| What | How long | Why | Enforced |
|---|---|---|---|
| Account data — name, work email, phone, role | Life of the account, then deleted or anonymised within 90 days of the contract ending | Needed to provide the service under contract | manual |
| Invoices, payments and financial records | Six years | Retained by legal obligation — UK company and tax law. Not deleted on request | manual |
| Audit trail — sign-ins, failed sign-ins, permission changes | Life of the account | Its purpose is to answer a question asked long afterwards; a trail that expires answers nothing | manual |
| Error diagnostics | 90 days | Deleted by our monitoring provider on its own schedule | manual |
| Demonstration requests, including anything written in the “what are you hoping to do” box | 12 months after the request is decided, unless it became a customer account | No reason to keep a declined or abandoned enquiry longer | automatic |
| Marketing contacts | Until you ask us to stop, or we have no continuing reason to hold them | Kept on legitimate interests and reviewed manually — this one is deliberately not on a timer, and opting out is immediate | manual |
| Message delivery log — which notification went to whom, and whether it arrived | 90 days. Failures are kept longer, because a repeatedly bouncing address is a pattern only a long history shows | Answering “did my customer get that?” | automatic |
| Contractor location history during a visit | 30 days | A GPS breadcrumb trail has no value once the job is closed | automatic |
| Stored payloads of webhook deliveries we ignored | 30 days | Kept only so an event type we start handling later can be replayed | automatic |
| Demonstration environments and everything seeded into them | Deleted automatically when the demonstration expires | A sandbox is not a record | automatic |
“Automatic” means a scheduled job deletes it on the stated period without anyone deciding to. “Manual” means a person reviews it — either because the period depends on a judgement no job can make, or because the record is one we are required to keep.
Your rights
Where we are the controller you may ask us for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, ask for it in a portable format, and withdraw any consent you gave. Write to privacy@moby.living. We answer within one month. We may need to verify your identity first, which we do through the account you already hold rather than by asking for identity documents.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first.
Cookies and browser storage
We set no analytics, advertising or tracking storage of any kind. The full list of what we do set, and why, is on the cookies page.
Changes
We publish the date of the last change at the top of this page. Where a change materially affects how we handle personal data we will tell affected organisations before it takes effect.