Privacy notice

CertusQS Limited is the data controller for personal data collected through this website. Where you use the CertusQS application under a contract with your employer, your employer is the controller and CertusQS Limited is the processor, acting on their instructions under a Data Processing Agreement.

Registered company number, registered address and data-protection contact to be inserted before public launch.

We do not collect special category data, we do not buy contact lists, and we do not build advertising or behavioural profiles.

• We do not send marketing email to addresses left on the early-access form. There is no newsletter and no automated sequence — a person replies to you.
• We do not sell or rent personal data, to anyone, for any purpose.
• We do not run third-party advertising or analytics trackers on this site.
• We do not use your commercial data to train machine-learning models.

Production data is hosted in the United Kingdom, including backups. Personal data is not routinely transferred outside the UK. If that ever needs to change, we will update this notice and put an appropriate safeguard in place — such as the UK International Data Transfer Addendum — before any transfer happens.

Only the people who need to: your own colleagues within your organisation’s account, and a small number of CertusQS staff for support and operations. We use a limited set of sub-processors for hosting, error monitoring and transactional email.

The current sub-processor list will be published here and in the Data Processing Agreement before public launch.

We may also disclose data where the law requires it. If we receive such a request, and we are permitted to tell you, we will.

• Early-access enquiries — until we have finished the conversation, and no more than 24 months after your last contact with us.
• Account data — for as long as your organisation holds an account, then deleted or anonymised on termination in line with the agreement.
• Audit and commercial records — retained for the life of the account, and afterwards for as long as your employer needs them for contractual or limitation-period reasons. Audit entries are append-only by design: they are not edited, and erasing an individual’s identity from them is handled by anonymising the actor rather than by rewriting history.
• Technical logs — 30 days.

Data is encrypted in transit and at rest. Access inside the application is controlled by explicit permissions and enforced at the server, not merely hidden in the interface. Passwords are stored only as one-way hashes. Every change to a commercial record is written to a cryptographically chained audit trail in the same database transaction as the change itself, which means the history cannot be quietly altered afterwards.

Under UK GDPR you have the right to ask for a copy of your personal data, to have inaccurate data corrected, to ask for erasure, to restrict or object to processing, and to receive your data in a portable format. You can also withdraw consent where we relied on it.

Ask us and we will respond within one month. There is no charge. If your data sits inside an employer’s account, we will pass the request to them as the controller and help them answer it.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first, so we can put it right.

This website sets no cookies for advertising or analytics. The application sets a single cookie to keep you signed in, which is strictly necessary for it to work and is removed when you sign out.

If we change this notice materially we will update the date above and, for account holders, tell you before the change takes effect.