Privacy policy

What we collect

Account details (name, email), organization information, operational records your organization creates (audits, checklists, findings, actions and evidence files), and technical data such as IP addresses and security logs.

How we use it

To provide and secure the service, send notifications you have enabled, process payments, and meet legal obligations. We do not sell personal data.

Who can see it

Only members of your organization according to their roles. Our staff access customer records only with your explicit, time-limited support grant or where legally required.

Retention

Records are kept while your subscription is active and for the retention periods configured for your organization, then deleted or anonymised.

Your rights

You may request access, correction or deletion of your personal data. Contact [privacy contact email].

Controller

[Company legal name and address]