Privacy notice

Company data should remain the company’s data.

This notice explains Aquino Command’s account and service-administration processing. When Aquino handles roofing-customer data for a client company, that company is normally the controller and the Aquino supplier named in the order form acts as processor under the DPA.

Who to contact

The Aquino Command supplier and privacy contact are identified in the signed customer order form. Signed-in customers should follow the support and incident process. Individuals whose details belong to a roofing company should normally contact that roofing company first because it decides why the information is used.

Information processed

Aquino may process account identity, company settings, team membership, invitations, customer contact details, enquiries, quotes, actions, call records, calendar events, authorised Gmail and website-form data, uploaded documents, billing status, support information and security audit events.

Purposes and lawful bases

Aquino uses account and company-administration data to perform the service contract, protect the service and customers, meet legal obligations, administer subscriptions and respond to support or rights requests. Where legitimate interests are relied on, they include operating a secure business service, preventing abuse and improving reliability. Aquino does not use dashboard customer records for advertising.

Sources and sharing

Information comes from authorised users, the company’s configured Gmail and calendar account, signed website or receptionist webhooks, imports and billing providers. It is shared only with personnel and service providers needed for hosting, authentication, connected services, email delivery, billing, support or legal compliance. Activated providers and any restricted-transfer safeguard must be recorded in the customer service schedule.

Company separation and security

Operational records carry a company workspace identifier. Server-side membership and role checks run before company data is read or changed. OAuth credentials and webhook secrets are encrypted and associated with one workspace. Security and availability measures are described in the Security Overview.

Retention and deletion

Workspace owners select an operational retention period. Account, billing, audit, support and backup records may follow different periods where needed for security, contract administration or law. Owners can export company data and request deletion; backup copies are isolated and expire according to the documented recovery schedule.

Rights

Depending on the processing and lawful basis, individuals may have rights of access, correction, erasure, restriction, objection and portability, and may withdraw consent where consent is used. They may complain to the UK Information Commissioner’s Office. Aquino does not make solely automated decisions with legal or similarly significant effects using dashboard data.

Required information

Identity and membership information is required to provide a private workspace. If it is not supplied, Aquino cannot create or secure the account. Connected integrations are optional and require the company’s explicit authorisation.

Changes

This notice is reviewed when data uses, providers or law materially change. Material changes affecting a customer’s processing will be communicated through the service or customer contact.