Legal · Draft for review
Privacy Notice
What Leasential needs to run a tenancy record, who can see it, and the choices available to the people named in it.
Draft updated 20 August 2026
This page is implementation copy, not an approved legal instrument. Counsel must confirm the retention schedule, company contacts, and final terms before launch.
Who is responsible
Zion Strategic Solutions, OPC operates Leasential and acts as the personal information controller for platform and account operations. A landlord remains responsible for the tenant records they enter and the lawful basis on which they use them.
Privacy questions may be sent to andongstech@gmail.com. A dedicated Data Protection Officer address must still be confirmed before this notice is approved.
Information handled by the service
- Account information such as name, email address, mobile number, role, language, avatar, consent record, and sign-in security state.
- Property and tenancy records such as properties, units, lease terms, rent schedules, deposits, and counterparties.
- Operational records such as payment confirmations, receipts, maintenance requests and photos, utility bills and shares, inventory checklists, and expense evidence.
- Security and service records such as notifications, session information, audit events, support correspondence, and technical diagnostics.
Leasential should collect only information necessary for a declared tenancy, service, security, legal, or support purpose.
Why it is used
- Provide the landlord and tenant features requested through an account.
- Keep payment, repair, utility, and condition evidence attached to the correct tenancy.
- Secure accounts, investigate misuse, recover from failures, and maintain an audit trail.
- Send service notices and respond to account, support, privacy, or legal requests.
- Meet contractual and legal obligations that apply to the service or its operator.
Who may receive it
Personal data is not sold, rented, or used for third-party advertising. Access is limited to:
- The landlord or tenant on the same active lease, and only for information needed to manage that tenancy.
- Confidentiality-bound service providers that host, secure, deliver, or support the platform.
- Government authorities or other recipients when disclosure is required by a valid legal obligation or order.
- Authorized Leasential operations personnel who need access to resolve a support, safety, billing, or security issue.
Retention and deletion
Leasential will keep each category only for as long as its declared purpose or an applicable legal obligation requires, then delete, anonymize, or securely dispose of it. Data must not be retained indefinitely for an unspecified future use.
Your data-subject rights
Be informed
Know what data is collected, why it is needed, how long it is kept, and who receives it.
Access
Ask for a copy of the personal data associated with your account.
Correct
Have inaccurate or incomplete information rectified.
Object
Object to processing based on consent or another applicable ground.
Erase or block
Request deletion, blocking, or removal where the law permits it.
Portability
Receive electronically processed data in a structured, commonly used format where applicable.
The Data Privacy Act also provides rights to file a complaint and, where applicable, claim damages. The National Privacy Commission publishes its current guidance on data-subject rights and its complaint process.
Security and incidents
The service uses role-based access, row-level database policies, private file storage, short-lived file links, encryption in transit, and audit records. No system is risk-free. Confirmed incidents will be investigated and affected people or authorities notified when applicable law requires it.
Changes to this notice
Material changes will be dated and communicated before they take effect where notice or renewed consent is required. Consent records include the version of the notice presented at the time.