Privacy notice
Last updated: 21/09/2026
Habitix is a CRM for UK letting agents, run by Habitix Ltd. Our website is www.habitix.co.uk and the app is at crm.habitix.co.uk. This notice explains what personal data we collect, why, and what rights you have. It covers:
- visitors to www.habitix.co.uk and crm.habitix.co.uk
- people who create an account or use the sandbox
- people who contact us
- people whose details letting agencies store in Habitix (see "Data we hold for letting agencies")
Who we are
Habitix Ltd is the data controller for the personal data described in this notice, except where it says we act as a processor.
Habitix Ltd, company number 17254226 (registered in England and Wales), registered office 195 Wood Street, London, E17 3NU, United Kingdom.
Contact: contact@habitix.co.uk
What we collect and why
| Who | What we collect | Why | Lawful basis |
|---|---|---|---|
| Account holders | Name, email address, password (stored encrypted, we can't read it), role, and a log of actions you take in the app | To create and run your account, control access by role, and keep an audit trail | Contract, and our legitimate interest in keeping the service secure |
| Sandbox users | Anything you enter into the demo | To let you try the product | Legitimate interest |
| Website visitors | Pages viewed, referrer, browser type, language, approximate location, and a session ID | To see how the site is used and improve it | Legitimate interest (you can opt out, see "Cookies") |
| People who contact us | Your name, email address and what you tell us | To reply and follow up on your enquiry | Legitimate interest |
We don't sell personal data, and we don't use it for advertising.
The sandbox is shared
The sandbox is a public demo. Anything you enter there can be seen by other visitors and may be deleted at any time. Please don't enter real personal details about yourself or anyone else.
Data we hold for letting agencies
Agencies that use Habitix store details of landlords, tenants, contractors and other contacts, along with property and compliance records. For that data, the agency is the controller and Habitix Ltd is its processor: we only process it on the agency's instructions, under a written agreement with them.
If your details are held by a letting agency that uses Habitix, please contact that agency to exercise your rights. If you contact us, we'll pass your request on to them.
Who we share data with
We use these providers to run the service. They process data on our behalf and under contract:
- Supabase: database, file storage and sign-in. Data stored in the UK.
- Lovable: website hosting and basic usage analytics, which is processed by Tinybird as its provider.
- Google Workspace: our email.
We may also share data if the law requires it, or to protect our rights.
International transfers
Our main database is hosted in the UK. Some providers, including the website hosting and analytics providers, may process data outside the UK. Where that happens, we rely on UK adequacy regulations or the UK International Data Transfer Agreement (or Addendum) to protect it.
Cookies and similar technologies
| Name | What it does | How long it lasts |
|---|---|---|
| sb-…-auth-token (browser storage) | Keeps you signed in | Until you sign out |
| __dpl | Used by our hosting provider to deliver the site | Session |
| session-id | Counts page views and visits for basic analytics | 30 minutes |
| hx_analytics_optout | Remembers that you opted out of analytics | 12 months |
We only use analytics to understand and improve our own website. The results are aggregated and don't identify you. You can opt out at any time with the "Cookie settings" link in the footer.
How long we keep data
We keep personal data only for as long as we need it for the purposes in this notice, and for as long as the law requires us to (for example, company and tax records). To decide how long that is, we consider what the data is, why we hold it, any legal or regulatory requirements, and the risk of keeping it. When we no longer need it, we delete it or anonymise it.
- Sandbox data: it can be reset or deleted at any time without notice.
- Agency customer data: kept as instructed by the agency, and deleted or returned when their contract with us ends.
Your rights
You have the right to:
- access your personal data
- correct it
- have it deleted
- restrict or object to how we use it
- receive it in a portable format
Email contact@habitix.co.uk to use any of these rights. We'll reply within one month.
Complaints
Please contact us first so we can try to put things right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Children
Habitix is for businesses and isn't aimed at anyone under 18.
Changes
If this notice changes, we'll update the date at the top. If a change is significant, we'll tell account holders by email.