GDPR stands for General Data Protection Regulation. It is the European Union's data protection law, adopted in 2016 and in effect since 25 May 2018. The UK has its own version (the UK GDPR), and Switzerland has a similar law.

The GDPR applies to any organisation that processes the personal data of individuals in the EU, wherever the organisation is located. Personal data is any information that can identify a person, such as a name, email address or IP address.

Organisations need a lawful basis, such as a contract or consent, to process personal data, and must be open about why they use it. Individuals can access, correct and erase their personal data, and can object to some processing. The GDPR also requires appropriate security, such as encryption, to protect personal data.

Maintainly is operated by 3Floorsup Pty Ltd, with sales and support provided by its US subsidiary, Maintainly LLC. Here is what we do.

We automatically delete user data 12 months after the software was last used, and data on website visitors who haven't been seen for 12 months. See our Data Retention Policy.

For the data you put into Maintainly, your organisation is the controller and we act as its processor. Our Data Processing Agreement sets out those terms. A signed copy is available on request through the in-app chat.

Maintainly LLC is certified under the EU-U.S. Data Privacy Framework, the UK Extension to it, and the Swiss-U.S. Data Privacy Framework. You can check our listing on the Data Privacy Framework List.

Our Data Protection Officer oversees how we manage personal data. Get in touch through the in-app chat or by emailing [email protected].

We review the data protection position of each vendor that processes personal data for us, and sign data processing agreements with them. The current list of sub-processors is on our Data Processing Agreement page.

Our security practices, including our ISMS Policy and Incident Management Process, are in our Trust Center.