Privacy notice
How KENYON PROPERTIES YORKSHIRE LTD handles personal information: on the pages of this site, in messages you send, and in the owners’ and residents’ portal. Every kind of item the portal stores is listed below, because the list was written from the code that runs it.
Last changed 13 November 2026.
A picture made for this page.
ResponsibleWho decides what happens to it
- Controller
- KENYON PROPERTIES YORKSHIRE LTD
- Company number
- 17432130, registered in England and Wales
- Registered office
- 4 Lourdes Grange Ackworth PONTEFRACT, WF7 7FF United Kingdom
- Questions about this notice
- tenants@kenyonproperties.website, with “Your data” at the start of the subject
- Data protection officer
- None appointed: the law does not require one for work of this kind and size, so questions go to the address above.
Reading the siteThe pages keep nothing about you
- No cookies, no analytics, no advertising, no tracking pixels and no social buttons.
- Nothing is loaded from anyone else’s server: the fonts, pictures and the one script are the site’s own.
- The date calculator on Kept in date works in your browser; what you type there never leaves your device.
- Cloudflare, which hosts the site, receives your device’s network address in order to send each page to it. The company receives nothing about your visit to these pages and keeps nothing about it.
Writing to usMessages you send
- What is kept
- Your address, your name if you give it, what you write and anything you attach.
- Why, and the lawful basis
- To answer you and to deal with what you ask: the company’s legitimate interest in answering the people who write to it, or steps you have asked for before an agreement (UK GDPR, Article 6(1)(f) and 6(1)(b)).
- How long
- Until the matter is closed and for twelve months after. Mail about a complaint is kept for six years after the complaint closes, the time within which a claim about it could still be brought (Limitation Act 1980).
- Who handles it for us
- Cloudflare’s email routing passes mail sent to the company’s address on to the email service that holds the company’s mailbox. Neither may use it for anything else. Mail is not running yet: the address belongs to a domain that is not connected.
In the keep, item by itemWhat the portal stores
The portal stores its data in Cloudflare Workers KV. Each kind of item has its own key prefix, shown in the first column. There is nothing else in the store.
| Item | What is in it | Why, and the lawful basis | How long, and how it goes |
|---|---|---|---|
Your account u: | Your name, your email address, a salted PBKDF2 hash of your password (never the password itself), when the account was made, when you confirmed reading this notice, and lists of your buildings, homes, reports and sessions. | To give you the account you asked for: contract, Article 6(1)(b). | Until you delete the account, which deletes it at once. |
Address lookup e: | A SHA-256 hash of your email address, pointing at your account. The address itself is never a key. | To find your account when you sign in: contract. | Deleted with the account. |
A session s: | A hash of the random token in your cookie, your account’s id and when you signed in. | To keep you signed in: contract. | Thirty days, then removed automatically; at once when you sign out, when the password changes (every other session) or when the account is deleted. |
A reset link r: | A hash of the link’s token and your account’s id. | To let you set a new password: contract. | One hour, then removed automatically; at once when it is used. |
A building b: | What you call it, its town, its kind, the homes in it and when it was added. | To keep it for you between visits: contract. | Until you remove it or delete the account; its homes and their reports go with it. |
A home h: | Its name as the people living there would say it; its check dates (gas, electrical inspection, energy certificate, alarm test) and when they were kept; its residents’ code; who joined it; its reports. | To work out its next dates and hold its reports: contract with the owner, and with each resident who joins it. | Until its owner removes it, removes its building or deletes the account. |
A residents’ code c: | The code and the home it opens. | To let the people living in a home join it: contract. | Until the owner makes a new code or removes the home. |
A fault report f: | What, where, since when, whether it is getting worse, how pressing it seems, when to call, the reporter’s name as they gave it, and the report’s trail: each addition, the class the repairs desk set and its reason, and each step reached, with dates and times. | To report a fault and follow it: contract. For a building in the company’s care, to get it put right: the legitimate interests of the company and of the building’s owner, and the owner’s duties to repair, Article 6(1)(f). | Until the reporter deletes it, its home is removed or the reporter’s account is deleted. A withdrawn report stays until it is deleted. |
The form key kp:form-key | A random key with no personal data in it, used to sign the moment each form was served. | To refuse forms sent by robots before anything is stored. | Kept, and replaced if it is ever exposed. |
To protect the portalHeld briefly, not about you
- Counting attempts
- Attempts to sign in, create an account, ask for a reset link, try a residents’ code or open the repairs desk are counted against a hash of the network address, of the email address or of the account, by Cloudflare’s rate limiting for at most sixty seconds and in the portal’s own memory for at most an hour. Nothing of it is stored. Basis: legitimate interests in keeping accounts safe, Article 6(1)(f).
- Request details
- For each request the portal answers, Cloudflare keeps the technical details of the request and its response for three days: the time, the address requested, the response and network information that can include the IP address. The portal adds nothing about you to them. A reset link’s address can appear there; it stops working an hour after it is made. Basis: legitimate interests in finding and fixing faults in the portal.
- Mail the portal sends
- Reset links, to the address you ask for, and a notice of each new fault report to the company’s own mailbox (the reference, the home, the reporter’s name and what was written). None is sent yet: the address they come from belongs to a domain that is not connected.
Seen byWho can see what
- You see everything you added.
- The owner of a home sees the reports made in it, with the name each reporter gave.
- Someone who joined a home with its code sees that home’s check dates and only the reports they made themselves.
- The company’s repairs desk opens one report at a time, by its reference, and sees that report alone: what was written, the home it is in and the reporter’s name. It sees no account, no email address and nothing else an owner keeps.
Cloudflare, as processor
Cloudflare hosts the site and the portal and stores the portal’s data on the company’s behalf, under its data processing terms with the company. It may hold copies in data centres outside the United Kingdom; those terms include the contract clauses UK law approves for transfers out of the country.
Nobody else
Nothing is sold, shared for marketing or used to make an automated decision about you, and no profile of you is built.
CookiesEvery cookie this site can set
The pages of the site set none. The table is made from the portal’s code each time the site is built, so it cannot drift from what the portal does.
| Cookie | Set for | What it is for | How long | Settings |
|---|---|---|---|---|
kenyon_keep | Owners and residents who sign in to the keep | Keeps you signed in. It holds one random token and nothing else; the server keeps only a hash of it. | 30 days, or until you sign out | HttpOnly; Secure; SameSite=Lax; Path=/ |
kenyon_desk | The company’s own repairs desk only | Keeps the repairs desk signed in. It holds its own expiry time, signed by the server, and nothing about anyone. | 8 hours, or until the desk signs out | HttpOnly; Secure; SameSite=Strict; Path=/keep/desk/ |
Both are strictly necessary for something you have asked for, so the law needs no consent for them (Privacy and Electronic Communications Regulations 2003, regulation 6(4)), and the site shows no cookie banner. Nothing is kept in your browser’s local storage.
Your rightsWhat you can ask for, and how
- A copy of what is kept about you (Article 15).
- A correction of anything wrong (Article 16).
- Deletion (Article 17): in the portal you can delete a report, a home, a building or the whole account yourself, at once.
- A pause on using it while a question is settled (Article 18).
- A copy you can take elsewhere, in a common format (Article 20).
- To object to anything done on the basis of legitimate interests (Article 21).
Write to tenants@kenyonproperties.website with “Your data” in the subject, from the address on the account if it is about the portal. There is no charge. The answer comes within one month; a request that is complex or one of many can take up to two further months, and you are told why within the first month.
You can complain to the Information Commissioner’s Office at any time, without asking the company first: ico.org.uk/make-a-complaint, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
ChangesWhen this notice changes
When the portal starts to keep something new, or stops, this notice changes with it and the date at the top moves. Nothing new is kept about an account before the notice says so.
To the keep