Privacy notice
In short: the list is built from public New York City records about buildings. It names companies that own or manage buildings, and sometimes a person in a business role as they appear in those records. It contains no email addresses or phone numbers. If you are listed and want to be removed, email [email protected] and you will be taken off the list and out of future updates.
Who we are
Rohdea Limited ("Rohdea"), a company registered in England and Wales (company no. 17254728), registered office 182-184 High Street North, London, E6 2JA. Rohdea makes BPS Radar and is the controller of the personal data described here. Contact: [email protected].
What we hold and where it comes from
- Building and business records: company names, business mailing addresses, and the names of people in business roles (for example a managing agent's registered officer or the owner named on a permit). Sources: public City of New York records, namely public City of New York property and building records, as described on the methodology page.
- People we contact or who contact us: name, job title, company, business email address, and what we discuss.
- Customers: billing details needed to invoice and get paid. Card payments are handled by Stripe; we don't see or store card numbers.
Why we use it, and our legal basis
- To build and supply the building list to business customers (engineering and energy consulting firms) for their own business development.
- To contact people at those firms about the service, by email or LinkedIn, one business to another.
- To answer questions, deliver what customers buy, and keep accounts.
We rely on legitimate interests for the building list and business outreach, and on contract and legal obligation for customers and accounts. We have weighed our interests against yours; you can ask for that assessment.
Who we share it with
- Customers receive the list for business-to-business use only and must honour removal requests.
- Service providers that process data for us: email (Google Workspace), payments (Stripe), website hosting and security (Cloudflare), and web fonts (Google Fonts, which sees your IP address when a page loads).
Some of these providers and our customers are in the United States. Where personal data leaves the UK, we rely on the safeguards UK data protection law requires, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.
This website
No cookies, no analytics, no tracking. Our host keeps standard server logs, including IP addresses, for security.
How long we keep it
The list is rebuilt every month from the public sources, so a record that disappears from them drops out at the next refresh. Correspondence is kept for up to 2 years after our last contact. Customer and accounting records are kept for 6 years, as UK law requires.
Your rights
You can ask to see the data we hold about you, have it corrected or deleted, restrict how we use it, or object to our using it, including for any marketing. Every email we send has a way to opt out, and we act on opt-outs within 10 business days. Email [email protected].
If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.