Privacy notice

Custos Oy, Business ID 3412345-6, Turku, Finland. Data protection enquiries: privacy@custos.fi.

Identity and contact

Name, address, email, telephone, preferred language and channel.

Property record

Address, systems, assets, warranties, documents, photographs of the property.

Service record

Visits, inspections, findings, quotations, approvals, invoices and messages.

Account and security

Sign-in events, device and session data, roles held, actions taken in the platform.

To perform the management agreement with the owner; to meet legal obligations in accounting, taxation and building law; and, on the basis of our legitimate interest, to keep the platform secure and to answer questions about work already carried out. Photographs of the interior of a residence are taken only where necessary to evidence a finding, and are restricted to the owner and the named manager.

The named manager and the office team. Contractors receive only the scope needed to carry out a specific work order. Our processors are the platform hosting and database provider within the EU, and our accounting system. We do not sell personal data and we do not use it for advertising.

Accounting records

Six years from the end of the financial year, as Finnish accounting law requires.

Property and service file

For the life of the engagement and ten years after, so warranty and liability questions can be answered.

Photographs and evidence

Ten years, or until the owner asks for erasure where no legal hold applies.

Access ledger

Two years, so any question about who saw what can be answered.

Enquiries not taken forward

Twelve months.

You may ask for a copy of your data, correction of anything wrong, erasure where no legal hold applies, restriction of processing, and portability of what you provided. Write to privacy@custos.fi and we will answer within one month. If you are not satisfied you may complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

Data is stored in the European Union. Access is role-based and every read of a restricted record is written to an access ledger the owner can inspect. Passwords are never stored in readable form and staff accounts may be required to sign in through the company identity provider.