This policy explains how CertFlow LTD ("we") collects and uses personal data when you use our website and platform. We are the data controller for the personal data described here.
Data we collect
- Account data: name, work email, phone and company details.
- Usage data: how you interact with the platform, for support and improvement.
- Content data: the assets, inspections and records you create (which may include personal data of your own staff and clients, for which you are the controller).
- Technical data: IP address, device and browser information.
How we use it
- To provide, secure and support the platform.
- To process billing and manage your subscription.
- To respond to enquiries and demo requests.
- To improve the service and communicate important updates.
Legal basis
We process personal data on the basis of performance of our contract with you, our legitimate interests in operating and improving the service, and compliance with legal obligations.
Sharing
We share data only with sub-processors who help us run the service (such as hosting and scheduling providers), under appropriate contractual safeguards. We do not sell personal data.
Retention
We keep personal data for as long as your account is active and as required to meet legal and accounting obligations. You can export and delete your data as described in our terms.
Your rights
You have the right to access, correct, delete and port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at info@certflow.co.uk. You may also complain to the ICO (ico.org.uk).
Cookies
Our website uses cookies as described in our Cookie Policy.