PRIVACY POLICY

Version 1 · Published: 30th Sept 2026

This privacy notice explains how Tradecert Limited ("we", "us", "our") collects, uses, stores and shares personal data when you use our services.

It applies when you visit tradecert.app, when you use the Tradecert application on iOS, iPadOS, macOS, Android or the web at my.tradecert.app, and when you contact us, buy a subscription or receive marketing from us.

This notice is a transparency notice, not a contract. Accepting our Terms and Conditions does not mean you have consented to anything described here as consent-based. Those choices are asked for separately and recorded separately.

Questions: support@tradecert.app.

Our Data Processing Agreement is Schedule A to our Terms and Conditions and applies automatically to every customer. Our cookie table is published at tradecert.app/cookies. Our sub-processor list is available in the Tradecert app, under Settings.

Tradecert is supplied for use in a trade, business, craft or profession and is not marketed as a consumer service.

Summary

• We provide certification and inspection software across a range of trades, including electrical installation work, emergency lighting, fire detection and alarm systems, portable appliance testing, solar and energy generation, electric vehicle charging equipment, gas and heating work, and other trades we support from time to time.

• We do not sell personal data, and we do not sell, license or commercialise information derived from your certificates or your clients' records.

• We hold certificate content on your behalf. We use it to run the Services, and to test, maintain and improve them — including the accuracy of our AI features. We never sell it, and we never share it with anyone for their own purposes.

• We use third-party AI providers to power features that read photographs and documents and suggest wording.

• Marketing email is sent only to people who have asked for it.

• Where we offer a WhatsApp route and you choose to use it, Meta handles that conversation as well as us, and we may send service messages about your account to the same number. We never send marketing on WhatsApp.

• Sharing with the advertising platforms named below happens only where you have given separate permission, and you can withdraw it in Settings.

• If you store a signature in a company workspace, other users of that workspace can apply it to certificates. You consent to that by storing it, and you can withdraw by removing it.

• You have rights of access, correction, deletion, restriction, objection, portability and complaint.

Our role: controller and processor

We act as a data processor for the content of the certificates and documents you create — including personal data about your own clients, such as their names, contact details, installation addresses and details of the work carried out. You decide what goes in; we hold and process it on your instructions to provide the Services. Your obligations as controller of that data are set out in Schedule A to our Terms and Conditions.

We act as a data controller in our own right for your account data: your name, email address, phone number, company details, professional credentials, subscription and billing information, how you use the Services, your support enquiries, your marketing and advertising choices, and the records of those choices. We process that data for our own purposes, described below.

Where a company workspace exists, the company is the controller of the certificate content created within it, not the individual user who happens to be signed in.

Information we collect

What you give us

• Name, email address, phone number

• Company details, trade registrations, scheme memberships and qualifications

• Subscription and billing information. Your payment details, whether card or bank details for Direct Debit, go directly to Stripe and are not held by us

• Certificate content, installation documentation, notes and observations

• Names, contact details and installation addresses of your own clients, where you enter them

• Photographs of installations, equipment, distribution boards and labels

• Test equipment details, including make, model, serial number and calibration dates

• Signatures you upload or create for use on certificates

• Company workspace membership, your role and permissions, and other users in the same workspace

• Anything you send us through the contact form, in-app feedback, WhatsApp or support

What we collect automatically

• Device and usage data, log and diagnostic data

• Approximate location derived from your IP address

• Precise device location, where you allow it, used to pre-fill the installation address on a certificate. You can refuse this and enter addresses manually, and you can change the permission at any time in your device settings.

• Error and crash data, including stack traces, device state and the account the error occurred on

• Product analytics events describing activity in the app — which certificate, company or client record was involved, together with the content of that record, as described under Product analytics below

• Push notification tokens and application configuration data

• Records of the choices you make — what you were asked, what you answered, when, which version of the documents applied, and on which platform. We keep an audit trail of these.

• On our marketing website only, and only where you have accepted it, recordings of how you move through the site — mouse movement, clicks, scrolling and screen recordings of the pages you visit

Providing your information

Some information is required to provide the Services under our contract with you: your name, email address, company details and billing information. Without it we cannot open or run an account.

Everything else is optional. Marketing, advertising permission, precise location and storing a signature are all voluntary, and declining any of them does not affect your access to the Services or the price you pay.

What we use it for, and on what basis

Each purpose below is followed by the lawful basis we rely on for it.

• Providing and operating the application; creating, storing and issuing certificates and reports — Contract

• Account administration, subscriptions, billing, service communications — Contract

• Replying to you where you contact us, including on WhatsApp where that route is offered, and sending service messages about your account to that number — Contract, and our legitimate interests in supporting you

• AI-assisted extraction, checking and drafting — Contract

• Operating, securing, testing, maintaining, improving and developing the Services, including measuring and improving the accuracy of AI-assisted features — Your instruction under Schedule A where we hold the content on your behalf; our legitimate interests for our own account and usage data

• Pre-filling an installation address from your device location — Consent (device permission)

• Push notifications about service activity — Contract, and consent where your device requires it

• Equipment and calibration tracking — Contract

• Error monitoring and crash reporting, to keep the Services working and secure — Legitimate interests

• Product analytics, support diagnostics, troubleshooting, and monitoring the health, security, stability and pricing of the Services — Legitimate interests for our own account and usage data; your instruction under Schedule A where we hold the content on your behalf

• Security, fraud prevention, business administration — Legitimate interests

• Marketing email about our products and services — Consent

• Sharing coded contact details with the advertising platforms named below — Consent

• Non-essential cookies and similar storage on the web — Consent

• Keeping records of the choices you have made — Legal obligation, and legitimate interests

• Meeting legal and regulatory obligations — Legal obligation

AI-assisted features

We use third-party AI providers to read uploaded photographs, certificates and notes so that we can populate certificate fields, extract information from images, and suggest wording for observations.

Certificate content submitted to an AI feature — including photographs, test results and free-text notes — is sent to the AI providers we use to deliver it. Those providers may include Google, Anthropic and OpenAI. Our sub-processor list names the providers we use at any given time, and we tell you before we add one.

We also use those providers on the records we already hold, not only on what you submit to a feature. To see how the Services are used, find faults and decide what to build, we analyse our own data with AI assistance — mostly through our internal analytics warehouse, which is a copy of certificate and client records with contact details, signatures, profile pictures and credentials already removed, and sometimes through the records themselves when we are investigating something specific. Your clients' contact details and signatures are not sent to an AI provider.

Improving the Services

We use certificate content, photographs, test results and notes to operate, secure, test, maintain, improve and develop the Services. That includes diagnosing faults, reproducing problems you report, building test data, and measuring, improving, training, fine-tuning and evaluating the accuracy of our AI-assisted features and the models behind them.

This is internal work. We do not sell your content, and apart from the one exception below we do not license or disclose it, or anything derived from it, to any third party for that third party's own purposes. No AI provider is permitted to use content that identifies you or anyone else to train or improve their own general-purpose models: for that we use each provider's business terms, under which submitted content is not used for their own model training and is retained only transiently for abuse monitoring. The one exception is content that identifies nobody — an image of an installation, a set of test measurements — which we may send to a provider on terms that let them use it to improve their own models. We decide what qualifies, and anything naming or picturing a person, your clients' details included, never does.

Where we can achieve the same result with de-identified or aggregated data, we use that instead. Access to identifiable certificate content for these purposes is limited to the people who need it.

Where a provider offers a United Kingdom regional endpoint we use it. Requests to Google Cloud Vertex AI are sent to its United Kingdom endpoint, and where that endpoint is unavailable or capacity-limited a request fails over to Google's global endpoint. Requests to a provider without a United Kingdom endpoint are processed outside the United Kingdom. In either case certificate content submitted to that AI feature may be processed outside the United Kingdom, and transfers are covered by the safeguards described below.

AI output is a suggestion. It is not automated decision-making with legal or similarly significant effects, and it is always subject to your review before a certificate is issued.

Analytics, error monitoring and your controls

These are two different things and they behave differently.

Product analytics

We use product analytics to understand how the Services are used, to diagnose faults and to support you when you contact us. Analytics events are linked to your account and include your name, email address, phone number, company, account identifier and role, so that our team can see what happened in your account when you report a problem.

Events also record activity within the Services — which certificate, company or client record was involved, the type of certificate, and the screens you moved through. They also record the content of the record the event concerns: the client's or installation's name and address, the field values involved and what changed, observations and notes, what an AI feature was given and what it produced, and links to the photographs and files attached to the record, which our team can open. This is how we can tell which record was affected when, for example, you tell us the wrong certificate was deleted, and how we measure and improve how features perform. It is part of the work described in Improving the Services above, under the instruction in Schedule A clause 3 of our Terms.

We do not record your screen, we do not use session replay, and we do not automatically capture the contents of forms or fields. Your clients' contact details, your signature, profile pictures and the certificates we generate for you are never sent to an analytics provider. An email address or telephone number typed into a note or any other field is removed before the event leaves your device.

Where you reach us through a tagged link — an advertisement, a newsletter, a social post, a partner's website or a printed code — the link carries campaign labels saying which one it was. We record those and attach them to your account, so that we can tell which of our own activity actually brings people to Tradecert. They say nothing about you, only about the link you followed. In the web application the labels are kept in your browser for up to 90 days, and only where you have accepted analytics storage in the cookie banner; in the mobile and desktop applications they are kept on the device for the same period. Nothing about the campaign is shared with any advertising platform, and this is not covered by the advertising permission — it is part of analytics and stops when you turn analytics off.

Our product analytics provider processes this information in the European Union.

Our internal analytics warehouse

Separately from the events described above, we keep an internal analytics warehouse, held by our cloud provider in the United Kingdom alongside the rest of your data. It is built from the records already stored in the Services — your account, company, subscription and certificate records — rather than from anything that tracks you. We use it to monitor the health and stability of the Services, to detect abuse and security problems, to plan capacity and set our pricing, to report on our own business, and to test, maintain, improve and develop the Services.

Personal data we have no reason to hold for that work is removed on the way in: contact details, signatures, profile pictures and credentials. What remains is accessible only to the people who need it. It is internal — nothing in it is sold, licensed, shared with an advertising platform, or disclosed to anyone for their own purposes.

For the records we hold on your behalf, this is part of the work you instruct us to do under Schedule A clause 3 of our Terms. For your own account and usage data, we rely on our legitimate interests in operating, securing and maintaining a stable service.

Like error monitoring, this is part of running the Services rather than an optional extra. It is not covered by the Product analytics switch, and it is not offered as a separate choice: we cannot tell whether the application is healthy, secure, stable and correctly priced from a record with gaps cut out of it.

The warehouse is rebuilt from your records rather than added to, so anything you delete in the Services drops out of it at the next refresh, and closing your account removes you from it the same way.

Analytics processing runs on the basis of our legitimate interests. It is not covered by the tracking consent question in the application — changing that answer stops advertising sharing, but analytics capture continues.

You have the right to object to analytics at any time. Turn off the Product analytics switch in Settings, or email support@tradecert.app and we will stop analytics capture for your account. Turning it off applies to your account, so it takes effect everywhere you are signed in.

Error monitoring

We monitor application errors and crashes so that we can find and fix faults. Error reports carry technical context and are linked to your account details, and may incidentally include fragments of the data present at the point the error occurred. Authentication headers, cookies and API keys are removed before an error report is sent.

Error monitoring is essential to keeping the Services secure and working, so it continues to run even if you have turned off product analytics. It does not store anything in your browser. Our error monitoring provider processes this information in the United States.

Cookies and similar technologies

The Services run on two different surfaces with different rules.

The application (my.tradecert.app and the mobile and desktop apps)

The Tradecert application, including the web application at my.tradecert.app, uses essential storage to keep you signed in and to remember your settings. In the web application we show a cookie banner covering analytics storage. The mobile and desktop applications keep nothing in a browser, so no banner is needed there.

When you first use the application we ask whether we may share coded contact details with our advertising partners. That answer governs advertising sharing only, and you can change it at any time with the Advertising measurement switch in Settings.

It does not govern product analytics, which runs on the basis of our legitimate interests and is controlled as described under Product analytics above.

The web application loads an advertising platform's browser tag only after you have given permission and only while you are signed in. The mobile and desktop applications contain no advertising pixel and no advertising SDK. Firebase Analytics on mobile runs only while product analytics is on, and shares nothing with Google Ads unless advertising is allowed.

The marketing website (tradecert.app)

Our marketing website at tradecert.app uses advertising and analytics tags, including Meta, TikTok, Reddit and Google, loaded from the site's own page header, with one loaded through Google Tag Manager. It also uses Contentsquare, which records how visitors move through the site — including mouse movement, clicks, scrolling and screen recordings of the pages visited — so that we can see which parts of the site work and which do not. None of these set cookies or collect data about you until you accept them in the CookieYes consent banner, and you can change or withdraw your choice at any time using the consent link on that site.

Contentsquare is used on the marketing website only. It is not used in the Tradecert application, and it never has access to your certificates, your clients' details or anything inside your account.

Our cookie table lists every cookie and identifier on both surfaces, with its provider, purpose and duration.

Advertising

Where you give us permission, we share limited contact information with the advertising platforms we use, so that they can try to match you to an account they hold. Those platforms may include Meta (Facebook and Instagram), Google, TikTok, OpenAI, Reddit and LinkedIn. We only ever run adverts on one or two at a time, nothing is shared with a platform until we are advertising there, and our cookie table says which are live today.

What we share is your first name, last name, email address, telephone number and the reference we use for your account in our own systems. These are cryptographically hashed before they are sent: turned into a code that cannot be turned back into your details. The platform compares that code against codes it holds for its own users, which is how it recognises the sign-up without either of us handing the other readable contact details.

Alongside the coded details, the platform receives the internet address and the browser or device type the request came from, the version of the application and its operating system, the reference from the advert you clicked where there was one, and for events on the web application the address of the page without its query string. The value and currency of a purchase are sent from our servers when the payment completes.

On the web application, once you have given permission, the platform's own browser tag also loads. It receives your IP address, your browser type, the advertising identifier it has already stored in your browser, and the page address — never one carrying a query string. The mobile and desktop applications contain no advertising pixel or advertising SDK; everything there is sent from our servers.

Where you reached us by clicking one of our adverts, we keep that advert's click identifier and send it with the conversion so the platform can match the two. It is kept in two places: on your device, and against your account on our servers, where only we can read it and where it is needed because a purchase can complete when the application is not open. Both are kept for at most 90 days from the click, and both are deleted when you withdraw your permission. The cookie table lists them.

We use this to measure how our advertising performs, to avoid showing subscription adverts to people who already subscribe, to show our adverts to you on those platforms, and to help them find people with similar characteristics to our users. All of that is covered by the single permission we ask for, and the in-app request explains it before you decide.

We never share your certificates, your clients' details, your installation records or anything about the jobs you have done with any advertising platform.

Where we start advertising on a platform already named above, we do not ask you again: the data and the purposes are the ones you have already agreed to, and the cookie table is updated to show it is live. A platform that is not named here, a new kind of data, or advertising built into the application itself would all mean asking you afresh.

App installs

We do not currently advertise inside other apps, so there is nothing to attribute an install to. If we start, Apple can tell the advertising platform that an install happened, in a delayed and aggregated form that does not identify you. That exchange is between Apple and that platform; nothing about you is sent to Apple by us, and nothing about it reaches the application.

On iPhone and iPad

If you give us permission, Apple's App Tracking Transparency prompt appears as well. Permission takes effect only if you also allow tracking there. If you have turned tracking off across your device, we record that as a refusal. If you later turn tracking off in iOS Settings, your permission is withdrawn automatically and we stop.

Withdrawing

Turn off the Advertising measurement switch in Settings, or email support@tradecert.app and we will stop sharing your details.

When you withdraw, sharing stops at once. On the web application the advertising tags stop sending anything and the cookies they set on our domain are deleted; a cookie a platform set on its own domain is governed by that platform's settings. The advert click identifier stored on your device is deleted, and the copy on our servers stops being used from that moment and is deleted within 90 days at the latest. A platform keeps what it already holds under its own terms, and we ask it to delete on request; you may also need to use its own settings for that.

Depending on the service, an advertising platform may act as our processor, as an independent controller, or as a joint controller. The platform's own privacy notice governs what it does as controller. We do not sell your personal data to advertising networks.

Marketing email

We send marketing email only to people who have asked for it — by ticking the box at signup, accepting a prompt in the app, or turning it on in Settings. Our lawful basis is consent.

If you have not opted in, you receive only messages necessary to run your account: security alerts, subscription and billing notices, and important service updates. You cannot opt out of those while you have an account.

Every marketing email contains a one-click unsubscribe and we act on it. You can also change your choice in Settings or email us. Unsubscribing does not affect service messages.

If you unsubscribe, your contact is marked as unsubscribed in our email system so that we do not email you again by mistake. That record is deleted with your account if you delete it; if you would like us to keep a note that you asked not to be contacted, tell us.

Messaging us on WhatsApp

Where we offer a WhatsApp route to contact us, it is one way of reaching us and never the only one — the in-app feedback form and support@tradecert.app do the same job without involving WhatsApp, and nothing in the Services depends on your using it.

If you do use it, WhatsApp is operated by Meta and the conversation passes through Meta's systems as well as ours. Meta receives your telephone number, your WhatsApp profile name and picture, the content of what you send, and the fact and timing of your contact with us. Message content is encrypted in transit, and Meta's own terms govern what it does with the account and the metadata. We hold the conversation as a support record in the same way as an email.

Where you have given us your telephone number, we may also send you service messages on WhatsApp — subscription, billing and renewal notices, reminders about work due on your account, and important service updates — using message templates approved in advance. These are the same service communications you would otherwise receive by email, on a channel you have already used to contact us. We do not send marketing on WhatsApp. Our marketing consent covers email, and marketing on any other channel would be a separate permission we would have to ask for first.

Please do not send us your clients' personal data, photographs of a person, or certificate content over WhatsApp. Use the in-app feedback form for anything that needs it, so that it stays inside the Services.

To stop, reply to tell us, block the number, or email support@tradecert.app, and we will use email instead. Stopping affects nothing else about your account.

Promotional partnerships

If you redeem a promotional code issued by one of our partners, such as Kewtech Corporation Ltd, we ask for your permission at the point of redemption before sharing anything that identifies you. With that permission we may share your name, email address, phone number, company name and website, the code redeemed, and the equipment you have registered, so that the partner can administer the promotion, prevent fraud and understand how it performed.

You can still redeem the code if you decline; we share only the code itself. You can withdraw at any time by emailing support@tradecert.app, although we cannot recover information already shared, and the partner's own privacy notice governs what it does with it.

Who we share information with

We use service providers to run, secure and support the Services. Where they process personal data for us, they do so under our instructions and under contract. Our sub-processor list names every one of them, with what they do, where they are, and the transfer safeguard that applies.

The categories are: cloud infrastructure, hosting, authentication and storage; AI processing; search indexing; product analytics, error monitoring and support; payment processing; email and customer communications; messaging platforms, where you choose to contact us on WhatsApp, and where we send service messages to a number you have given us; internal team messaging, into which in-app feedback is routed together with your name, email address, telephone number, company and the screen you sent it from; application build and distribution; website hosting; and consent management.

We may change providers from time to time. Where a change affects a provider that handles data we hold on your behalf, we give at least 30 days' notice by email or in-app notice, update the sub-processor list, and you may object on reasonable data protection grounds. The procedure is set out in clause 6 of Schedule A to our Terms and Conditions.

Advertising platforms are not sub-processors and never receive certificate content or your clients' details.

We may also share information where the law requires it, to establish or defend legal claims, or in connection with a sale or reorganisation of our business.

Company workspaces and signatures

If you join or are added to a company workspace, your name, email address, role and stored signature are visible to other users of that workspace.

How signatures work

Every user account in a workspace, other than accounts assigned an office or administrative support role without certificate permissions, can select and apply any signature stored in that workspace — including one belonging to another user of any role.

Only accounts assigned an Administrator or Qualified Supervisor role can complete, lock or finalise a certificate. A certificate prepared or signed by anyone else does not become a completed certificate until an Administrator or QS account completes it.

Your consent

By storing a signature in a workspace, you consent to other users of that workspace applying it to certificates and reports produced on behalf of that company. A signature applied this way may appear on a document with professional and legal significance.

You can withdraw at any time by deleting your signature, asking your administrator to remove it, leaving the workspace, or emailing support@tradecert.app. Withdrawal applies going forward and does not change documents already produced. If you do not want your signature available to others, do not store one — the Services work without it.

The company running the workspace decides who is authorised to use this functionality and must obtain any authority needed from the people whose signatures are stored. We provide the technical functionality; we do not verify identity or check authority when a signature is applied, and we do not warrant that any record of a signing event will be complete or available for audit purposes.

If you think you have been added to a workspace in error, contact your administrator or support@tradecert.app.

International transfers

Your certificates and the other data we hold for you are stored and processed in the United Kingdom, in Google Cloud's London region. Processing outside the United Kingdom and the EEA includes the following.

• AI features. Where Google's United Kingdom AI endpoint is unavailable or capacity-limited, a request fails over to Google's global endpoint and may be processed in any Google Cloud region. Those requests carry the certificate content submitted to the feature.

• Google-managed global services. Firebase Authentication and Google Analytics for Firebase run on Google's global infrastructure and cannot be restricted to a region.

• Error monitoring. Error reports are processed in the United States.

• Billing, and advertising measurement where you have given permission. Stripe and the advertising platforms named above operate on global infrastructure.

• WhatsApp messaging. Where you contact us on WhatsApp, or we send you a service message there, Meta processes the conversation and its metadata on global infrastructure, including in the United States.

• Transactional email. The emails we send on your behalf, including certificates you send to your clients, are hosted in the European Union, in Belgium. Our provider is a United States company whose terms permit processing in the United States and elsewhere its group companies and suppliers operate.

Our search provider processes indexed data in the United Kingdom, holds search analytics in the European Union, in Germany, and provides ancillary services such as its dashboard and monitoring from the European Union and the United States. Our product analytics provider processes data in the European Union. Our marketing-website session recording provider processes data in the European Union, in Ireland, with limited international access by its personnel for service and support.

Some of our internal business systems — accounting, task management, source control, internal messaging and application build infrastructure — are operated from the United States and hold account and business data rather than certificate content.

Transfers outside the United Kingdom are made under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, incorporated into each provider's data processing agreement, or under a UK adequacy decision where one applies. The position for each provider is shown on our sub-processor list.

How long we keep information

How long we keep records depends on the type of information, why we hold it, how long it is likely to be needed for inspection cycles and professional purposes, and any legal or regulatory obligation.

Certificates and inspection records are often needed years after they are created. A periodic inspection cycle may be five years or longer, and records relating to building work, a notification to a building control body or scheme, or an installation's original certification may be needed for the life of the installation — including when a property is sold, refurbished or re-inspected. We take that into account, and we do not delete certificate records simply because a subscription has ended or a payment has failed.

Billing and financial records are kept for as long as tax and accounting law requires. Records of your marketing, advertising and analytics choices are kept for as long as you have an account, so that we can show we have honoured them, and are deleted with it. Backups are overwritten on their ordinary cycle.

Where we hold certificate content on a customer's behalf, we handle requests to return or delete it in line with Schedule A to our Terms and Conditions.

We review what we hold from time to time.

Access to your records after your subscription ends

When your paid term ends, your account changes to read-only. You can still sign in and view your certificates, but downloading and export are switched off, so you should download the records you need while your subscription is active.

We continue to store your records as described above, as a continuing service rather than a leftover. If you need a copy afterwards, email support@tradecert.app and we will provide it, normally within 30 days, for as long as we still hold it. There is no charge for a reasonable request. Where you are a business customer and we hold certificate content on your behalf, you can ask us to return or delete it at any time, as set out in clause 10 of Schedule A to our Terms and Conditions.

Your rights

You can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, or transfer it. You can object to processing based on legitimate interests, and you can object to direct marketing at any time without giving a reason. Where we rely on consent, you can withdraw it.

To unsubscribe from marketing, use the link in any marketing email or change your choice in your account settings. To stop advertising sharing, turn off the Advertising measurement switch in Settings. For anything else — including objecting to product analytics, or asking for a copy or deletion of your data — email support@tradecert.app.

We respond within one month. If a request is complex or you have made several, we may extend by up to two further months and will tell you within the first month. We do not charge unless a request is manifestly unfounded or excessive, and we will tell you before doing any work. We may need to verify your identity.

Where we hold data on another organisation's behalf, we may need to refer your request to them.

Deleting your account, and asking us to erase your data

If you delete your account yourself in the application, we remove your account record, your credentials and the files you uploaded, and we remove your contact from our email system. Certificates in a company workspace belong to that company and are not deleted; if you belong to a workspace you will need to leave it before the account can be deleted. This closes your account and stops us contacting you.

If you want your personal data erased more fully than that, email support@tradecert.app. We will then remove or de-identify personal data held in the other systems that support the Services — including our product analytics, error monitoring and search providers, and our internal analytics warehouse — and ask any advertising platform you had given permission for to delete what we sent it, within 30 days of your request.

We do this on request rather than automatically, because those systems hold the diagnostic and support records we rely on to help other users of your company workspace, to investigate issues that arose before you left, and to keep the Services secure. If you would like everything removed, tell us and we will do it.

Some information is not removed. We keep what we are required or permitted to keep — for example billing records for tax purposes. Backups are overwritten on their ordinary cycle rather than edited.

Where you are a member of a company workspace, certificate records belonging to that company are not deleted by your request. Contact the company that owns the workspace.

Complaints

If you are unhappy with how we have handled your personal data, email support@tradecert.app. We aim to acknowledge within five working days and respond within one month.

You can also complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113. We will never discourage you from doing so.

Automated decision-making

We do not make decisions about you by automated means that produce legal or similarly significant effects. AI features suggest; you decide.

Security

We apply technical and organisational measures appropriate to the data we hold, including encryption in transit and at rest, access controls, multi-factor authentication on administrative systems, and monitoring. Customer Data stored in the core Tradecert application is held in Google Cloud's London region, subject to the international processing described above. We maintain the backup and recovery arrangements described in Schedule B to our Terms and Conditions.

Payment details are captured and processed entirely within Stripe's own checkout and billing pages. We never receive or store card numbers or bank details.

No system can be guaranteed completely secure. Keep your login details private, and remove workspace access from people who no longer need it.

Age

You must be 18 or over to create an account, buy a subscription, use the Services or be added to a company workspace. The account holder is responsible for making sure nobody under 18 uses their workspace. If we believe an account belongs to someone under 18, we will close it.

Changes to this notice

Where a change is material, we present the updated documents in the application and you must accept them to continue. Our Terms and Conditions, End User Licence Agreement and this notice share a single version, shown at the top of each document, and are presented together. Each acceptance is recorded.

Our sub-processor list and cookie table are maintained separately and can change without a new acceptance. Where a change to the sub-processor list affects data we hold on your behalf, we give notice as described above.

Your optional choices — marketing, advertising and cookies — are versioned separately from these documents, and none of them blocks your use of the Services. If we change what we are asking for in the advertising permission, we ask you again for that choice alone. A change to the cookie or marketing wording is recorded against new answers; an answer you have already given stands until you change it.

Minor corrections take effect when published. Previous versions are available on request.

Contact

Tradecert Limited, 111-113 High Street, Evesham, Worcestershire, WR11 4XP, England

Company number 15542281 · VAT number 503816901 · support@tradecert.app