Privacy Policy

1. Who we are

This Privacy Policy explains how the IGEM/UP/1B Edition 4 Tightness Test Calculator ("we", "us") processes personal data. We act as data controller for account and billing information you provide, and as data processor for the test records and PDFs you generate.

2. What we collect

• Account data: name, email, business name, role.
• Test records: job details, site addresses, calculation inputs and results, signatures, photos, and generated PDFs.
• Usage & device data: sign-in timestamps, browser/OS, and basic diagnostic logs.
• Billing data: handled by our payment provider; we do not store full card numbers.

3. How we use your data

• To provide and secure your account and the Service.
• To store and sync your saved records and PDFs to your account.
• To provide support and respond to enquiries.
• To take payment and prevent fraud.
• To meet legal, tax, and accounting obligations.

4. Legal bases (UK GDPR)

We rely on contract (to provide the Service), legitimate interests(to secure and improve the Service), legal obligation (accounting, safety), and consent where required (e.g. marketing emails, which you may withdraw at any time).

5. Sharing

We share data only with processors that help us run the Service:

• Cloud hosting and database (for authentication, storage, and record sync).
• Payment provider (for subscriptions).
• Email delivery for transactional messages.

We do not sell your personal data.

6. Retention

Account data is kept while your account is active and for a reasonable period afterwards. Test records and PDFs remain until you delete them or close your account. Billing records are kept for the period required by law (typically 6 years).

7. Security

We use encrypted transport (HTTPS), row-level access controls so users can only read their own records, private storage buckets with signed URLs, and hashed credentials. No system is perfectly secure; you must also keep your password safe.

8. Your rights

Under UK GDPR you have rights to access, rectify, erase, restrict, port and object to processing of your personal data, and to complain to the ICO (ico.org.uk). To exercise a right, contact us.

9. Cookies & local storage

We use strictly necessary cookies and local storage for sign-in sessions, saved preferences, and offline PWA functionality. We do not use advertising trackers.

Manage cookie preferences

10. International transfers

Where data is processed outside the UK, we rely on appropriate safeguards such as UK IDTA or Standard Contractual Clauses.

11. Changes

We may update this policy. Material changes will be notified in the app or by email.

12. Contact

Privacy queries: contact us.