Gaffwise
Privacy notice
Draft, last updated November 2026.
Who we are
Gaffwise (business details to be confirmed) is the data controller for the information you give us. Contact: privacy@example.co.uk.
What we hold
- Your email address, used to sign you in.
- The names and addresses of the properties you add.
- Safety certificates you upload, and the details read from them (dates, results, defects, contractor names).
Certificates can contain tenants’ names. We don’t ask for tenant details and only keep what appears on the documents you choose to upload.
Why, and our lawful basis
To provide the service you sign up for: keeping a record of your properties’ statutory checks (contract). Processing tenant details that appear on certificates is in your and our legitimate interest in meeting safety law.
Who processes it for us
- Supabase: database, sign-in and file storage, hosted in London (UK).
- Vercel: runs the website, with server functions in London (UK).
- Our AI provider reads uploaded certificates to pull out dates and results. Documents are sent securely, aren’t used to train AI models, and may be processed outside the UK under approved safeguards.
How long we keep it
While your account is open, and for up to 6 years after, as certificates are often needed for insurance, sale or council enquiries. You can ask us to delete everything sooner.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it, by emailing privacy@example.co.uk. You can also complain to the Information Commissioner’s Office (ico.org.uk).