Privacy Policy

Who we are

dryn is operated by Traceable Access Limited (company number 12983816), registered in England and Wales, with a registered office at 16 Richford Gate, Richford Street, London W6 7HL, United Kingdom. This policy explains what personal data we collect through dryn.co.uk and the dryn application, why we collect it, and what rights you have over it.

What data we collect

If you're an account holder (a landlord, property manager, or other business user of dryn), we collect:

• Your name, email address, and organisation name
• Billing details — your card is processed directly by our payment provider; we do not store your full card number
• Information about the properties, buildings, spaces, and locks you set up in dryn
• Login and security activity, including IP address, for fraud prevention and account security

If you're a tenant or access user invited to dryn by an account holder, we collect:

• Your name and email address, as provided by the account holder who invited you
• Access credentials (such as PIN codes) issued to you, and the access events they generate — when and how a lock was used

We do not currently use website tracking cookies or third-party analytics on dryn.co.uk. The application itself uses essential session cookies to keep you signed in.

Why we collect it

We use this data to provide the dryn service to you — creating your account, connecting your locks, issuing and revoking access codes, billing you correctly, sending you service-related emails (such as a PIN notification), and keeping your account secure. Where required, we rely on our contract with you, our legitimate interest in running and securing the service, or a legal obligation (such as billing records) as the basis for processing.

If you're a tenant, not an account holder

If you access dryn because a landlord or property manager invited you, that account holder is the data controller for your personal data — they decide what information about you is held in dryn and for what purpose. Traceable Access Limited acts as a data processor on their behalf for that data. Questions about how your specific access was set up should go to them directly; questions about how dryn itself handles data can come to us.

Who we share data with

We share data with third-party service providers who help us run dryn, only as needed to provide the service. These include:

• Cloud infrastructure and database providers, who host our systems and your account data
• Payment processors, who handle your card details directly — we never see or store your full card number
• Email delivery providers, who send service emails on our behalf (confirmations, PIN notifications, invitations)
• Your lock manufacturer's own platform — when you connect a lock, relevant access data is shared with that platform in order to connect and manage your locks
• Application hosting providers, who run the dryn web application

We may change or add to our service providers from time to time as dryn evolves. Where that changes the categories of processing described above, we'll update this policy.

We do not sell your personal data, and we do not share it with anyone for their own marketing purposes.

How long we keep your data

When you or an account holder removes something in dryn — a lock, a tenant, an access credential — that record is not immediately and permanently erased. We retain it for as long as your account remains active, and for a period afterward as required for legal, tax, or audit purposes.

Your rights

Under UK data protection law, you have the right to access the personal data we hold about you, ask us to correct it, ask us to erase it (subject to the retention note above), restrict or object to certain processing, and receive a copy of your data in a portable format. To exercise any of these rights, contact us using the details below. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you believe we have not handled your data properly.

International transfers

Our core infrastructure is hosted within the EU. Some third-party services we rely on to operate dryn may process data outside the UK or EEA; where that happens, we require appropriate safeguards to be in place.

Children

dryn is a business tool and is not directed at, or knowingly used to collect data from, children.

Changes to this policy

We may update this policy from time to time as dryn evolves. We'll update the date at the top of this page when we do.

Contact us

For any question about this policy or your data, get in touch with us, or email hello@dryn.co.uk.