Privacy Policy & GDPR

GDPR Statement

CleanReports Ltd is committed to protecting and respecting your privacy. We are registered with the Information Commissioner's Office (ICO) under registration reference ZC121439. CleanReports Ltd (Company No. 17132967) is the data controller for personal data collected through this website and platform.

We collect and process personal data only where we have a lawful basis to do so, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any data protection queries, contact patrick@cleanreports.co.uk.

Privacy Policy

What data we collect

Name, email address, organisation name, and job title when you submit an enquiry or contact us directly. For platform users: email address, role, and inspection records in the normal course of using the platform.

Why we collect it

To respond to enquiries, manage pilot programme applications, and operate the CleanReports compliance platform. Platform data is collected to generate the SHA-256 audit trail records that are the core product.

How we store it

Contact data is stored securely in Google Workspace. Platform data is stored in AWS RDS (PostgreSQL) in the eu-west-2 (London) region, with automated daily backups and 7-day retention. We do not sell or share your data with third parties, except where required to deliver the service (AWS infrastructure).

How long we keep it

We retain contact data for no longer than necessary for the purpose it was collected. Platform inspection records are retained for the period required by the regulatory frameworks the platform supports — specifically the Building Safety Act 2022 Golden Thread requirements, which may require retention for the life of the building.

Your rights

You have the right to access, correct, or request deletion of your personal data at any time by contacting patrick@cleanreports.co.uk. Note that inspection records forming part of the SHA-256 audit trail cannot be deleted without breaking the chain of integrity — this is a regulatory requirement, not a discretionary design choice.

Cookies

This website uses no tracking cookies. The platform uses an httpOnly session cookie for authentication — this is a strictly necessary technical cookie and does not track behaviour.

Contact

Patrick Jordan, Data Protection Officer, CleanReports Ltd — patrick@cleanreports.co.uk