Privacy Policy

Last updated: 19 June 2026

1. Who we are

This Privacy Policy explains how Compliant Property Certificates ("we", "us", "our") collects and uses your personal data when you use our website, request a quote, or book a service. We are the "data controller" responsible for your personal data.

If you have any questions about this policy or how we handle your data, contact us at info@compliantpropertycertificates.co.uk or 0203 488 0550.

Registered business address: [Add your business / registered address here].

2. The information we collect

Depending on how you interact with us, we may collect:

• Enquiry details — your name, email address, phone number, property postcode and any message you send when you request a quote or contact us.
• Booking and job details — the property address and postcode, the service required (EPC, EICR, Gas Safety, PAT), appointment date and time, and any access notes needed to carry out the work.
• Account details — if you are a member of staff with access to our booking system, we hold your username, name and a securely encrypted (hashed) password.
• Technical data — basic information needed to run the site securely, such as server logs. When you log in to the member area, a secure session token is stored in your browser to keep you signed in.

3. How and why we use your information

We use your personal data only where the law allows us to. Our purposes and lawful bases are:

• To respond to enquiries and provide quotes — on the basis of our legitimate interests and taking steps at your request before entering a contract.
• To arrange and carry out the services you book — to perform our contract with you.
• To manage staff access to our booking system — on the basis of our legitimate interests in running the business securely.
• To meet legal and regulatory obligations — for example keeping records relating to certificates we issue.

4. Cookies and local storage

We do not use advertising or third-party tracking cookies. The member area uses your browser's local storage to keep you securely signed in; this is essential to the functioning of that area and is not used for tracking.

5. Who we share your information with

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf, under appropriate agreements:

• Website hosting (Vercel) — hosts our website.
• Database and login provider (Supabase) — securely stores account and booking data.
• Email provider — used to send service and enquiry notifications.
• Postcode lookup (postcodes.io) — used to validate UK postcodes you enter.

Some providers may process data outside the UK. Where they do, we take steps to ensure your data is protected by appropriate safeguards. We may also disclose information where required by law.

6. How long we keep your information

We keep your personal data only for as long as necessary for the purposes set out above, including to meet any legal, accounting or reporting requirements. Records relating to certificates may be retained for [add your retention period, e.g. 6 years] in line with industry and legal requirements. When data is no longer needed, we securely delete it.

7. Your rights

Under UK data protection law you have the right to:

• request access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data, where there is no legal reason to keep it;
• object to, or ask us to restrict, our use of your data;
• request that we transfer your data to another provider; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email info@compliantpropertycertificates.co.uk. We will respond within one month.

8. How we protect your information

We take the security of your data seriously. Our website is served over encrypted connections (HTTPS), passwords are stored only in encrypted (hashed) form, and access to booking data is controlled so that staff members can only see the jobs they are permitted to.

9. Children

Our services are aimed at property owners, landlords and businesses, and are not directed at children. We do not knowingly collect data relating to children.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.

11. Complaints

If you have a concern about how we handle your data, please contact us first so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.