Privacy Policy

Last Updated: 9 March 2026

1. Introduction

This Privacy Policy explains how Beckley Electrical, trading as CertMate, collects, uses, stores, shares, and protects your personal data when you use the CertMate mobile application and related services. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.

2. Data We Collect

2.1 Information You Provide

Account information (name, email, phone), professional details (qualifications, scheme registration, insurance), certificate data (client details, addresses, test results, observations, circuit schedules), voice recordings (streamed for transcription, not permanently stored), photographs, billing information (via Apple), and support communications.

2.2 Information Collected Automatically

Device information, usage data, log and diagnostic data, and network information.

3. How We Use Your Data

We process your data for: providing the Services (contract performance), AI-assisted features (contract performance), account management, billing, cloud backup and sync, service improvement (legitimate interests), security and fraud prevention (legitimate interests), customer support, legal compliance (legal obligation), and marketing (consent only).

4. AI Processing and Third-Party Processors

When using recording and photo features, data is processed by:

ServiceProviderPurpose
Deepgram Nova-3Deepgram, Inc. (USA)Real-time speech-to-text
Claude SonnetAnthropic, PBC (USA)Data extraction from transcripts
GPT VisionOpenAI, Inc. (USA)Consumer unit photo analysis

All providers are contractually prohibited from using your data to train their AI models or retaining it beyond processing time.

5. Data Sharing

We share data only with our processors (Deepgram, Anthropic, OpenAI, AWS, Apple), professional advisors, and law enforcement where legally required. We do not sell your personal data, share it with advertisers, or use it for profiling.

6. International Data Transfers

Data is primarily stored in the UK (AWS eu-west-2, London). AI processing may occur in the USA, protected by UK-approved Standard Contractual Clauses.

7. Data Retention

Account data is retained while active plus 12 months. Raw audio is not permanently stored. Billing records are kept for 6 years (UK tax requirements). Usage data is retained for 24 months. Backups are kept up to 90 days.

8. Your Rights

Under the UK GDPR and Data (Use and Access) Act 2025, you have rights to: access, rectification, erasure, restrict processing, object to processing, data portability, withdraw consent, and not be subject to automated decisions. Contact us at support@certomatic3000.co.uk to exercise your rights. We will respond within one month.

9. Data Security

We apply encryption in transit (TLS/HTTPS) and at rest (AES-256), access controls, regular security assessments, and secure cloud infrastructure (AWS with ISO 27001, SOC 2 certifications). In the event of a data breach, we will notify you and the ICO within 72 hours where required.

10. Children's Data

CertMate is for qualified electricians aged 18+. We do not knowingly collect data from anyone under 18.

11. Cookies and Tracking

The App does not use cookies. Analytics can be opted out of in App settings.

12. Marketing Communications

Marketing is consent-only. You can unsubscribe at any time.

13. Changes to This Policy

We will notify you of material changes by email and/or through the App.

14. Contact

Email: support@certomatic3000.co.uk

For ICO complaints: Information Commissioner's Office, ico.org.uk, 0303 123 1113

By using CertMate, you acknowledge that you have read and understood this Privacy Policy.