Asset Cloud · Last updated 2 September 2026
Asset Cloud is an asset register and inspection-recording service operated by Aber Heating Engineers ("we", "us") for facilities and estates teams. It is used by engineers and managers at the organisations that subscribe to it. This policy explains what personal data the Asset Cloud app and website process, why, and your rights.
For account data (your name and email address) Aber Heating Engineers is the data controller. Asset and inspection records belong to the organisation that owns the site being inspected; for those records we act on that organisation's instructions.
Contact: tommysandford@outlook.com
| Data | Why | Kept |
|---|---|---|
| Name and email address | To create your account, sign you in, and show who completed each inspection or task (a compliance requirement). | While your account is active |
| Photos you take or attach | To document equipment, faults and inspections. Photos are attached to the asset or inspection you choose; we never access your photo library without you selecting a picture. | With the record they belong to |
| Inspection, task and work-order records you create | This is the core purpose of the service: a statutory maintenance and inspection register. | As required by the owning organisation's compliance obligations |
| A device token for push notifications | Only if you allow notifications: so we can send you reminder summaries. Removed when you sign out or turn notifications off. | Until sign-out or opt-out |
| Data saved on your device for offline use | The phone app keeps a copy of the sites you download, and any inspections or assets you record with no signal, until they upload. This stays on your device. | Until uploaded / you sign out |
Data is stored on Google Cloud infrastructure (Cloud SQL, Cloud Storage, Cloud Run) and Firebase (sign-in and website hosting), in the europe-west2 (London) region. Emails are sent through Resend. Push notifications are delivered through Apple's and Google's notification services, which receive only the notification text and your device token. These providers act as our processors.
All data is transmitted over encrypted (HTTPS/TLS) connections. Photos and documents are stored privately and served only through short-lived signed links to signed-in users with permission to see them. Access is controlled per organisation and per site.
Under UK GDPR you can ask to see, correct, or delete the personal data we hold about you, or object to its processing. Inspection records are kept for statutory compliance and may be retained by the owning organisation even after your account is closed, with your personal details minimised where possible. To exercise any right, email us at the address above. You may also complain to the Information Commissioner's Office (ico.org.uk).
Asset Cloud is a workplace tool and is not intended for anyone under 16.
We will update this page if our practices change and update the date at the top.