Privacy policy

CertDiary (“we”) is a web service for self-managing landlords in England. This policy explains what we collect and why. It is written for UK GDPR. It is not legal advice.

Who is responsible

The operator of CertDiary is the data controller for the information you submit. Contact: hello@certdiary.co.uk.

What we collect

• Account details: name, email address, and a hashed password (or your Google account email if you sign in with Google).
• Property and tenancy records you enter (addresses, dates, deposit amounts, certificate files).
• Billing identifiers from Stripe if you subscribe (we do not store full card numbers).
• Technical logs: IP address, browser type, and error reports so we can fix faults.

Why we use it

• To provide the diary, reminders and certificate storage you asked for (contract).
• To send account emails: verification, password reset, and (on a paid plan) deadline reminders (contract / legitimate interests).
• To take payment through Stripe (contract).
• To keep the service secure and to diagnose errors (legitimate interests).

Who we share it with

We use processors who only act on our instructions:

• Google Firebase (authentication, database, file storage, hosting) — typically EU or UK regions where we have configured them.
• Stripe (subscriptions).
• Resend (transactional email).
• Slack (internal alerts that a new account was created or that an error occurred — we do not post certificate files there).

We do not sell your data. We do not use it for advertising networks.

How long we keep it

We keep your account and property records while the account is open. If you delete your account we remove the Firestore records we hold for you. Backups may persist for a short period. Stripe keeps payment records as required by tax and card-scheme rules.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can object to processing based on legitimate interests. You can complain to the ICO (ico.org.uk). Use the delete-account control in Settings or email us.

Cookies

We use essential cookies and local storage so you stay signed in. We do not run analytics or advertising cookies.