Privacy centre

Nuba is a trading name of Nuba Technologies Ltd, company number 16344130, registered at 3 Breeze, 4 Owls Road, Bournemouth, BH5 1FE, United Kingdom. We are registered with the UK Information Commissioner’s Office.

For this website and the waitlist, we are the controller. You can reach our privacy team at support@nubarewards.com.

Nuba handles personal data in three different roles. Which one applies depends on where the data comes from.

• This website and the waitlist. Nuba is the controller. This notice covers it in full.
• The Nuba Alliance platform used by an operator. The operator is the controller of its residents’ and staff’s data; Nuba is the processor and acts on the operator’s instructions under a data processing agreement. Residents should read their operator’s privacy notice first.
• The Nuba consumer service (paying rent by card and earning rewards at nubarewards.com). Nuba is the controller and that service has its own privacy policy.

• Waitlist form: your name, work email, company, role, the approximate size of your portfolio and anything you write in the message box.
• Technical data: IP address, browser and device type, pages viewed and the time of your visit, collected by our hosting provider’s standard logs.
• Correspondence: anything you send us by email after you get in touch.

We do not ask for payment details, identity documents or any special category data on this site.

• To respond to your waitlist request and talk to you about Nuba Alliance. Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
• To run, secure and improve the site. Lawful basis: our legitimate interest in keeping the site working and safe.
• To send you updates about Nuba Alliance if you have asked for them. You can stop these at any time using the link in each email or by emailing us.

We do not sell personal data. We share it only with providers who help us run the service:

• our website hosting provider;
• our email delivery provider, which sends waitlist notifications to our team;
• our internal tools for tracking enquiries, where your details are stored once received;
• professional advisers, regulators or courts where the law requires it.

Each provider is bound by a contract and may only use the data to provide its service to us.

Our platform data is stored in the United Kingdom and the European Economic Area. Where a provider processes data outside the UK, we rely on the UK International Data Transfer Agreement or an adequacy decision, and we keep a record of each transfer.

• Waitlist details: for as long as we are in conversation with you and for up to 24 months after our last contact, so we can follow up when a pilot or a new property becomes relevant. You can ask us to delete them sooner.
• Technical logs: no longer than 12 months.
• Contract records for operators that sign with us: for the life of the agreement plus six years, as required for legal and accounting purposes.

This website uses only the cookies and local storage needed for it to work. We do not run advertising trackers on it. If we add analytics in future, we will ask for your consent first and update this notice.

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong;
• delete your data, where we have no overriding reason to keep it;
• restrict or object to how we use it, including stopping any marketing;
• give you your data in a portable format.

Email support@nubarewards.com. We will respond within one month. If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk, although we would appreciate the chance to resolve it with you first.

If your data is on the platform through your housing operator, please contact the operator in the first instance; they are the controller and we will support them in meeting your request.

When an operator uses Nuba Alliance, on the operator’s instructions we may process:

• property, unit and tenancy records, including rent amounts and due dates;
• resident names and contact details for membership, rewards and service requests;
• rent payment events used to award points and confirm payment;
• consent records, including any choice a resident makes about rent reporting;
• staff accounts and the audit trail of what they did in the workspace.

We keep operators’ data separate from one another, limit staff access to the properties they work on, log every privileged change, and never use resident data to make automated decisions with legal or similarly significant effects. Rent reporting to a credit reference agency happens only for residents who opt in and can be withdrawn at any time.

We will update this page when our practices change and show the date at the top. Material changes that affect people on our waitlist will be emailed to them. The platform terms are at terms and conditions.