Privacy Policy
Last updated: 7 October 2026
This privacy policy explains how Project Ark Limited, trading as Cortile, processes personal data. In most cases we act as a data processor on behalf of landlords and managing agents, who are the data controllers. We act as a data controller only in respect of our website, marketing and business contact data.
1Who we are
Project Ark Limited, trading as Cortile (“Cortile”, “we”, “us” or “our”), is a company registered in England and Wales under company number 12236613, whose registered office is at Pannone Corporate LLP, 378–380 Deansgate, Manchester M3 4LY. We are registered with the Information Commissioner’s Office (the “ICO”) under registration number ZA707197.
Enquiries regarding this policy should be sent to cora@cortile.com.
2Our role
2.1Processor. When the Cortile app or platform is used, your landlord or managing agent determines the purposes and means of processing your personal data and is the data controller. We process that data as a data processor, only on their documented instructions and under a written contract with them.
2.2Residents should direct any query about their personal data, or any request to exercise their rights, to their landlord or managing agent. We will pass any such request we receive to the relevant controller and assist them in responding to it.
2.3Controller. We are the data controller only for personal data relating to visitors to our website, individuals who subscribe to our updates, and individuals we deal with at our customers, suppliers and partners. Sections 3 to 5 apply to that data.
2.4We may compile aggregated statistical data about the performance of the Services. Such data does not include personal data and does not identify any individual.
3Personal data we collect
Where you contact us, subscribe to our updates or do business with us, we collect your name, email address, telephone number, company and job title. When you visit our website, we collect your IP address and technical information about your device and browser.
4How we use personal data and our lawful bases
You may unsubscribe from marketing communications at any time.
5Disclosure of personal data
5.1We do not sell personal data. We disclose personal data only to service providers who support our business operations (including hosting, email and analytics providers), our professional advisers, regulatory authorities where required by law, and any prospective purchaser of our business.
5.2In providing the app and platform, we engage the following sub-processors: Amazon Web Services (hosting) and Amplitude (product analytics). Both process personal data within the European Union under written contracts containing appropriate data protection obligations.
5.3Payments made through the Services are processed by Stripe under its own agreement with the relevant landlord or managing agent. Stripe’s handling of payment details is governed by its own privacy policy.
6Security and international transfers
6.1We maintain appropriate technical and organisational measures to protect personal data, including access controls, staff training and contractual safeguards with our suppliers.
6.2App and platform data is stored within the European Union, which is recognised under UK law as providing an adequate level of protection.
6.3In the event of a personal data breach, we will notify the relevant controller and, where required, the ICO.
7Retention
7.1We retain personal data for which we are the controller only for as long as is necessary for the purposes for which it was collected, and for up to seven years after the end of a business relationship where required for legal purposes.
7.2Marketing data is retained until you unsubscribe.
7.3App and platform data is retained or deleted in accordance with our customers’ instructions.
8Your rights
8.1Under UK data protection law, you have the right to request access to your personal data and to request its rectification, erasure, restriction or transfer. You also have the right to object to its processing and to withdraw any consent you have given at any time.
8.2Requests concerning app and platform data should be made to your landlord or managing agent. All other requests should be sent to cora@cortile.com.
8.3Complaints about our handling of your personal data may be sent to cora@cortile.com. We will acknowledge any complaint within 30 days, investigate it and inform you of the outcome. You also have the right to lodge a complaint with the ICO.
9Cookies
9.1We use strictly necessary cookies, which keep you signed in and enable the Services to operate. We also use advertising cookies on our website, but only if you agree to them when asked; if you do not, none are set. You may block cookies through your browser settings, although parts of the Services may not then function.
9.2We use the following cookie providers:
9.3You may change your answer at any time using the Cookie settings link in the footer of our website. Withdrawing your agreement stops any further advertising cookies being set.
10Third-party websites
Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of those websites, and you should review their privacy policies.
11Changes to this policy
We may update this policy from time to time and will notify you of any material changes.