Last updated: 9 April 2026
Who we are
Building Trust is a trading name of ontheRISE Management Ltd, a company registered in England and Wales (Company No. 15503485). Our registered office is 4A Hafer Road, London SW11 1HF.
We operate two products: LEASE-iQ (AI-powered lease analysis) and BLOCK-iQ (building compliance portal). This policy covers both products and this website (building-trust.uk).
Data controller: Adam Street, adam.street@building-trust.uk
What data we collect
Website visitors: We collect standard analytics data (pages visited, browser type, approximate location via IP). We do not use advertising trackers or sell data to third parties.
LEASE-iQ users: When you use LEASE-iQ, you upload a lease document. We process this document to provide your analysis. We also collect your email address if you create an account.
BLOCK-iQ users: BLOCK-iQ stores building management data including: building details, leaseholder names, unit information, compliance records, service charge data, and consent records. This data is provided by the building's director or managing agent.
Contact forms: If you contact us or request pilot access, we collect your name, email, building name, and any information you provide.
How we use your data
We use your data to provide the services you have requested: lease analysis, compliance tracking, or responding to enquiries. We do not use your data for any other purpose. We do not sell, rent, or share your personal data with third parties for marketing purposes.
Lawful basis for processing
Under Article 6 of the UK GDPR, our lawful bases for processing personal data are:
- Contract (Art. 6(1)(b)) for processing necessary to provide LEASE-iQ and BLOCK-iQ to you under our terms of service.
- Legitimate interests (Art. 6(1)(f)) for analytics that are essential to running and improving the service, and for responding to your enquiries.
- Consent (Art. 6(1)(a)) for our monthly newsletter and any optional marketing communication. You can withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)) where we must retain certain records to meet UK statutory or tax obligations.
Lease documents
Lease documents uploaded to LEASE-iQ are processed by our AI engine to provide your analysis. Documents are encrypted in transit (TLS 1.2+) and at rest. Processing runs in Google Cloud Platform's europe-west2 (London) region. Your lease is never used to train any AI model. Not ours, not Google's, not any third party's. We do not share your documents with other users or third parties.
Where your data is processed. All LEASE-iQ AI processing runs on Google Cloud Platform, region europe-west2 (London). Your lease never leaves the UK during processing.
Retention. Lease documents are retained while your account is active so you can continue conversations and re-analyse them. You can delete a document at any time via My Leases → Delete, which removes the file and all associated conversation history within 30 days. If you close your account, all documents and chat history are deleted within 30 days. Backups containing deleted data are purged within a further 60 days.
BLOCK-iQ building data
BLOCK-iQ stores building management data on behalf of the building's management company (RTM, SoF freehold company, or RMC). The management company is the data controller for leaseholder personal data stored in BLOCK-iQ. We act as a data processor on their behalf. Leaseholder personal data (names, contact details, occupancy information) is accessible only to authorised users with appropriate roles.
Data storage and security
All data is stored on secure, encrypted servers. Our application uses PostgreSQL databases hosted on infrastructure with industry-standard security controls. Access to production data is restricted and logged.
Standard retention periods. Account data is retained for the lifetime of your account plus 30 days after closure. Transactional emails and audit logs are retained for 12 months. Newsletter subscriptions until you unsubscribe. Anonymised analytics for up to 26 months. Where law requires longer retention (for example, UK tax records), we retain for the period the law requires.
Your rights
Under UK GDPR, you have the following rights:
- Right to be informed (this policy)
- Right of access (to a copy of your personal data)
- Right to rectification (to correct inaccurate data)
- Right to erasure (to have your data deleted, subject to legal exceptions)
- Right to restrict processing
- Right to data portability (to receive your data in a machine-readable format)
- Right to object to processing based on legitimate interests
- Rights in relation to automated decision-making and profiling
To exercise any of these rights, contact us at adam.street@building-trust.uk. We respond within one calendar month.
If you are a leaseholder whose data is stored in BLOCK-iQ by your building's management company, your first point of contact for data requests is the management company (as data controller). We will assist them in responding to your request and, if they fail to respond within a reasonable time, you can contact us directly to raise the issue.
Complaints and the ICO
If you are not satisfied with how we have handled your personal data or your data-rights request, you can complain to the UK supervisory authority, the Information Commissioner's Office (ICO). The ICO is the UK regulator for data protection.
Details: ico.org.uk/concerns · helpline 0303 123 1113. We would prefer the chance to put things right first (please contact us at adam.street@building-trust.uk before complaining to the ICO) but you have the right to complain at any time.
Cookies
This website uses only essential cookies required for the site to function. We do not use tracking cookies, advertising cookies, or third-party analytics cookies that identify individual users.
Third-party services
We use the following third-party services to operate our products:
- SendGrid: transactional emails (service charge demands, notices, invitations).
- Codapt: application hosting platform for BLOCK-iQ.
- Google Cloud Platform: hosting and AI processing infrastructure for LEASE-iQ. All inference runs in europe-west2 (London). Lease documents and conversation content are not used to train Google's models or any third-party model.
- Stripe: payments processing for subscriptions (when you become a paid user). Stripe is its own data controller for payment data.
Each provider processes data under their own privacy policies and in accordance with the data processing agreements we hold with them.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated via the website. The "last updated" date at the top of this page indicates when the policy was last revised.
Contact
For any privacy-related questions or requests:
Adam Street
adam.street@building-trust.uk
ontheRISE Management Ltd
4A Hafer Road, London SW11 1HF