Privacy Policy
Last updated: 3 June 2026
This Privacy Policy explains how CtrlAsset Ltd (“CtrlAsset”, “we”, “us”) collects, uses, and protects personal data when you use our website at www.ctrlasset.com and our product at app.ctrlasset.com (together, the “Service”).
Who we are
CtrlAsset Ltd is the data controller for personal data processed through the Service.
- Legal entity: CtrlAsset Ltd
- Registered address: [ADD REGISTERED ADDRESS]
- Company number: [ADD COMPANY NUMBER]
- Country / governing law: England and Wales
- Contact: privacy@ctrlasset.com (or hello@ctrlasset.com)
Information we collect
- Account registration data — name, email address, and login credentials used to create and secure your account.
- Organisation / workspace data — information you and your team add to operate the Service, including fleet, bookings, finance, compliance, and document records.
- Billing and subscription data — subscription plan and payment information processed through Stripe. We do not store full card details ourselves.
- Support and contact data — information you provide when contacting us or requesting a demo.
- Analytics and advertising data — collected only where you have given consent through our cookie banner. See our Cookie Policy.
How we use your information
- To provide, operate, and maintain the Service.
- To manage accounts, subscriptions, and billing.
- To provide support and respond to enquiries.
- To improve the Service and, where consented, measure marketing.
- To meet legal, accounting, and security obligations.
Cookies and consent
We use necessary cookies to run the site and optional analytics/marketing cookies only where consented. You can change your choices at any time via the “Cookie settings” link in the footer. Full details are in our Cookie Policy.
Processors and sub-processors
We use trusted providers to deliver the Service:
- Lovable — hosting and platform
- Supabase — authentication, database, and storage
- Stripe — payments and billing
- Google — analytics and advertising, where consented
- Mailgun / Lovable Emails — transactional email
- Google Workspace — business email and communications
International transfers
Some providers may process data outside the UK or EEA. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.
Security
We apply reasonable technical and organisational measures to protect personal data, including access controls, encryption in transit, and trusted infrastructure providers. No system is completely secure, but we work to safeguard your information.
Data retention
We keep personal data only for as long as necessary to provide the service, meet legal obligations, resolve disputes, and enforce agreements.
Your rights
Subject to applicable law, you have the right to access, correct, delete, or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time.
To exercise these rights, contact us at privacy@ctrlasset.com. You may also have the right to complain to your local data protection authority (in the UK, the Information Commissioner’s Office).
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.
Contact
Questions about this policy? Email privacy@ctrlasset.com or hello@ctrlasset.com.