CLEARDECK LIMITED

Company number 17475729
Registered in England and Wales
Markwell Wood, Harlow, CM19 5QZ
andrew@cleardeck.uk

This page is for ClearDeck (the board).

This notice is for ClearDeck, ZipCert and CostDeck.

Your firm is the controller of the personal data it puts into these services. CLEARDECK LIMITED is the processor and acts on your firm's instructions.

What we hold

• The email you sign in with.
• The name and role your office sets.
• Jobs, sheets, photos, receipts and comments that your firm puts on the board.
• Certificate answers and the PDF you generate on ZipCert.
• A one-way fingerprint of the invite link an admin gives you to set a password, for 48 hours or until you use it.
• A copy of the PDF on the job, when a certificate is started from a job.
• Quote figures you type into CostDeck.
• If your firm links CostDeck to the board: the client, address, work, start date and price of an accepted quote. The price is shown to the owner and business manager only.

What we do not do

• We do not sell your data.
• We do not run ads on it.
• We do not calculate CIS.
• We do not keep a public phone number.
• You can download the PDF at any time. That copy is yours.

Why we hold it

• To run the board, the cert and the quote tool you asked us to run. Legal basis: contract.

Where it lives

• Hosting and app data: Cloudflare (Workers, KV, R2). Payments: Stripe. We use them as processors / subprocessors to run the service you asked for.

How long

• Account and firm records while the firm is a customer.
• ZipCert drafts wipe after 7 days.
• An issued certificate is kept for 15 years from issue or until the next test date, whichever is later, even if the person who issued it is removed from the firm or deletes their own copy.
• Photos are not attached to certificates. All job photos, which live in job packs, are kept for 6 years from upload, unless your firm clears the pack sooner.
• If a certificate is started from a job, the firm keeps a copy of the PDF on that job.
• The engineer copy of that certificate is removed one week after the office first downloads it from the job.
• You can ask us to close an account: andrew@cleardeck.uk

Your rights

• Access, correction, deletion, complaint to the ICO (ico.org.uk). Email andrew@cleardeck.uk first.
• Because your firm is the controller, a request about data in your firm's account goes to your firm first. We help the firm answer it.

Cookies

• A session cookie so you stay signed in.
• HttpOnly, Secure. SameSite=Strict on ClearDeck and CostDeck, SameSite=Lax on ZipCert.
• No marketing cookies.

Changes

• We will date the notice when it changes.