Privacy Policy

1. Introduction

ElecCerts Software Ltd ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our applications and services.

This policy applies to all our applications including CableRate, Max Zs Calc, EICR Photo App, Emergency Lighting Photo App, Minor Works App, and Remedial Engineer App, as well as our website at eleccerts.co.uk.

2. Data Controller

ElecCerts Software Ltd is the data controller responsible for your personal data. We are registered in England and Wales.

3. Data We Collect

We collect different types of information depending on how you use our services:

3.1 Information You Provide

• Account Information: Name, email address, company name, phone number
• Professional Information: Electrical contractor details, certification numbers
• Customer Data: Client names and addresses you input for certificates
• Project Data: Photos, test results, calculations, and notes you create
• Payment Information: Processed securely through app stores (we don't store card details)

3.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: App features used, frequency of use, performance data
• Location Data: Only if you enable location services for specific features
• Log Data: IP address, access times, app crashes, system activity

4. How We Use Your Data

We use your information for the following purposes:

5. Data Storage and Security

5.1 Where We Store Your Data

Your data is stored on secure servers within the UK and European Economic Area (EEA). We use industry-standard cloud services including:

• Amazon Web Services (AWS) for primary data storage
• Google Firebase for real-time syncing and authentication
• Encrypted backups in multiple geographic locations

5.2 Security Measures

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication systems
• Regular backups and disaster recovery procedures
• Staff training on data protection

6. Data Sharing

We do not sell, rent, or trade your personal information. We only share your data in these limited circumstances:

• Service Providers: Technical partners who help operate our services (under strict confidentiality agreements)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: If we merge with or are acquired by another company
• With Your Consent: When you explicitly agree to sharing

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Request limited processing of your data
• Object: Object to certain types of processing
• Withdraw Consent: Where processing is based on consent

To exercise any of these rights, contact us at privacy@eleccerts.co.uk. We will respond within 30 days.

8. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

• Active Account Data: Retained while your account is active
• Certificates & Reports: 7 years (UK electrical regulation requirements)
• Financial Records: 6 years (UK tax requirements)
• Marketing Data: Until you unsubscribe
• Deleted Account Data: Removed within 90 days of account closure

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

10. International Transfers

Your data is primarily stored within the UK and EEA. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions covering the receiving country
• Your explicit consent where required

11. Cookies and Tracking

Our mobile apps do not use cookies. Our website uses essential cookies for functionality. We use analytics to improve our services, which you can opt out of in app settings.

12. Changes to This Policy

We may update this privacy policy periodically. We will notify you of significant changes via email or app notification. The "Last updated" date at the top shows when this policy was last revised.

13. Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you're unsatisfied with our response.