Privacy Policy
This policy explains how CertDone handles account information and the business data stored in the service.
Last updated: 3 September 2026Who is responsible
CertDone is the controller for account administration, security, support and billing information. Each subscribing business is the controller for the customer, landlord, tenant, property and certificate information it enters. CertDone acts as its processor for that information.
Information we process
We process names, business contact details, registration numbers, account and team details, login and security records, subscription status, support messages, customer and property information, certificate contents, signatures, PDFs, email-delivery events and renewal dates.
Why we use it
We use information to provide the service, authenticate users, create and store documents, send requested emails and reminders, process subscriptions, prevent misuse, maintain backups and support customers. Our legal bases include performing the contract, legitimate interests in operating and securing the service, and legal obligations. Subscribing businesses decide their own lawful basis for customer data.
Who receives information
We use service providers needed to run CertDone, including Cloudflare for hosting and storage, Resend for email delivery and Stripe for subscription billing. They process information under their own security and data-protection arrangements. We do not sell personal information.
International processing
Some suppliers may process information outside the United Kingdom. Where required, appropriate contractual or legal safeguards are used for international transfers.
Retention and deletion
Active account data is retained while the service is used. Daily recovery snapshots are normally retained for up to 35 days. When an owner deletes an account, accessible business data and stored files are removed. Limited records may be retained where needed for tax, fraud prevention, dispute resolution or other legal obligations.
Security
CertDone separates each business’s records, restricts account actions by role, protects sessions and stores service credentials separately from customer data. No system can guarantee absolute security, so users should report suspected access problems immediately.
Your rights
Depending on the circumstances, individuals may have rights to access, correct, erase, restrict, object to or receive a copy of their personal information. For information entered by a heating or plumbing business, contact that business first. For CertDone account information, email us. You may also complain to the UK Information Commissioner’s Office.
Contact
Privacy requests and questions can be sent to support@certdone.co.uk.