Privacy Policy
Last Updated: 9 March 2026
1. Introduction
This Privacy Policy explains how Beckley Electrical, trading as CertMate, collects, uses, stores, shares, and protects your personal data when you use the CertMate mobile application and related services. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.
2. Data We Collect
2.1 Information You Provide
Account information (name, email, phone), professional details (qualifications, scheme registration, insurance), certificate data (client details, addresses, test results, observations, circuit schedules), voice recordings (streamed for transcription, not permanently stored), photographs, billing information (via Apple), and support communications.
2.2 Information Collected Automatically
Device information, usage data, log and diagnostic data, and network information.
3. How We Use Your Data
We process your data for: providing the Services (contract performance), AI-assisted features (contract performance), account management, billing, cloud backup and sync, service improvement (legitimate interests), security and fraud prevention (legitimate interests), customer support, legal compliance (legal obligation), and marketing (consent only).
4. AI Processing and Third-Party Processors
When using recording and photo features, data is processed by:
| Service | Provider | Purpose |
|---|---|---|
| Deepgram Nova-3 | Deepgram, Inc. (USA) | Real-time speech-to-text |
| Claude Sonnet | Anthropic, PBC (USA) | Data extraction from transcripts |
| GPT Vision | OpenAI, Inc. (USA) | Consumer unit photo analysis |
All providers are contractually prohibited from using your data to train their AI models or retaining it beyond processing time.
5. Data Sharing
We share data only with our processors (Deepgram, Anthropic, OpenAI, AWS, Apple), professional advisors, and law enforcement where legally required. We do not sell your personal data, share it with advertisers, or use it for profiling.
6. International Data Transfers
Data is primarily stored in the UK (AWS eu-west-2, London). AI processing may occur in the USA, protected by UK-approved Standard Contractual Clauses.
7. Data Retention
Account data is retained while active plus 12 months. Raw audio is not permanently stored. Billing records are kept for 6 years (UK tax requirements). Usage data is retained for 24 months. Backups are kept up to 90 days.
8. Your Rights
Under the UK GDPR and Data (Use and Access) Act 2025, you have rights to: access, rectification, erasure, restrict processing, object to processing, data portability, withdraw consent, and not be subject to automated decisions. Contact us at support@certomatic3000.co.uk to exercise your rights. We will respond within one month.
9. Data Security
We apply encryption in transit (TLS/HTTPS) and at rest (AES-256), access controls, regular security assessments, and secure cloud infrastructure (AWS with ISO 27001, SOC 2 certifications). In the event of a data breach, we will notify you and the ICO within 72 hours where required.
10. Children's Data
CertMate is for qualified electricians aged 18+. We do not knowingly collect data from anyone under 18.
11. Cookies and Tracking
The App does not use cookies. Analytics can be opted out of in App settings.
12. Marketing Communications
Marketing is consent-only. You can unsubscribe at any time.
13. Changes to This Policy
We will notify you of material changes by email and/or through the App.
14. Contact
Email: support@certomatic3000.co.uk
For ICO complaints: Information Commissioner's Office, ico.org.uk, 0303 123 1113
By using CertMate, you acknowledge that you have read and understood this Privacy Policy.