What the portal keeps
The pages of this site set no cookies and keep nothing about the people reading them. The owners’ and residents’ portal is different: it exists to keep things for you between visits. This note says what it keeps, why, where, for how long, who can see it, and how to delete all of it.
KeptWhat is stored, and why
- Your account
- Your name, your email address, when the account was made and when you agreed to this note. The password is never stored or written to any log: what is kept is a salted hash of it, made with PBKDF2, which cannot be turned back into the password.
- What you add
- Buildings (the name or address you give, the town, the kind), the homes in them, each home’s check dates, the code for each home, and fault reports: what, where, since when, how pressing, when it suits someone to call, the date, and your name as it appears on the report.
- Homes you join
- Which homes you joined with a code, so that you can report faults there and see your own reports.
- The cookie
- One cookie, called
kenyon_keep, set only when you sign in or create an account. It holds a random token and nothing else; it cannot be read by scripts, is only sent over an encrypted connection and is not sent when another site links here with a form. It lasts thirty days or until you sign out. The server keeps only a hash of the token, and signing out deletes it. - Guarding against guessing
- Counts of recent attempts to sign in, create an account, reset a password or try a home’s code, kept against a hash of the network address and of the email address, for between fifteen minutes and an hour. A reset link is kept, as a hash, for one hour.
Nothing else is collected. There is no analytics, no advertising, no tracking, and no script, font or picture loaded from anyone else’s server. Nothing you keep here is sold, shared for marketing or used to decide anything about you.
Seen byWho can see it, and where it is held
You, and the people you share a home with
You see everything you added. The owner of a home sees the faults reported in it, with the name of the person who reported each one. Someone who joined a home with its code sees the home’s check dates and only the reports they made themselves: never other residents’ reports, and nothing of the owner’s other buildings.
The company, and where it is held
KENYON PROPERTIES YORKSHIRE LTD is responsible for this data. It does not yet look after any building, and it does not act on anything kept here. The data is held in Cloudflare Workers KV on the company’s Cloudflare account; Cloudflare handles it on the company’s behalf and may hold copies in data centres outside the United Kingdom.
How longUntil you delete it
Everything is kept until you remove it. Removing a building, a home or a report deletes it at once. Your account → Delete the account deletes every part of it in one go: the account, every building and home you added with their dates and the faults reported in them, the faults you reported elsewhere, your place in homes you joined, every session and every reset link. The company keeps no backup copy; copies held by Cloudflare clear within about a minute.
No email is sent today: the address the portal would send from belongs to a domain that is not live yet. When it is, the only messages will be the password-reset links you ask for.
Under UK data protection law you can ask for a copy of what is kept about you, have it corrected or deleted, and complain to the Information Commissioner’s Office. Write to tenants@kenyonproperties.website from the address on the account.
To the portal