01What we collect
Booking details: name, contact details, property address and access arrangements. Inspection outputs: the records our engineers produce, including photographs taken during the visit. Account data where you hold a portal login.
OPERATIVE CLAUSE PENDING LEGAL DRAFT
02Why we hold it
To carry out the inspection you booked, to issue and store the resulting record, to contact you before a record expires, and to meet the record-keeping duties that attach to some certificates.
OPERATIVE CLAUSE PENDING LEGAL DRAFT
03Who we share it with
The engineer attending, the person giving access where you have told us to contact them, and the accreditation bodies or laboratories involved in issuing a specific record. Not sold, and not used for third-party marketing.
OPERATIVE CLAUSE PENDING LEGAL DRAFT
04How long we keep it
Certificates are retained for the period the relevant regulations require, and in some cases longer where you rely on us as your record store. Booking correspondence is kept for a shorter period.
OPERATIVE CLAUSE PENDING LEGAL DRAFT
BUSINESS INFORMATION REQUIRED — the actual retention period for each document type, for inspection evidence, and for booking correspondence. No period is stated on this page because none has been decided.
05Your rights
Access, correction, erasure, restriction, portability and objection, subject to the record-keeping duties above. Requests go to the contact address on this page.
OPERATIVE CLAUSE PENDING LEGAL DRAFT
06Cookies and analytics
This build sets a session cookie when you sign in to the portal, and a CSRF token cookie on the sign-in form. Both are strictly necessary for the account area to work. No analytics, advertising or third-party tracking cookie is set by this build.
OPERATIVE CLAUSE PENDING LEGAL DRAFT
BUSINESS INFORMATION REQUIRED — confirm whether analytics or advertising will be added before launch. If so, a consent mechanism is required and this section must describe it.
07Payment data
Card details are entered on Stripe’s own checkout and are never sent to, processed by, or stored on Haven’s systems. Haven stores the payment status, the amount, and Stripe’s reference for the transaction, so that a booking can be reconciled against what was actually paid.
OPERATIVE CLAUSE PENDING LEGAL DRAFT
LEGAL REVIEW REQUIRED — confirm the controller/processor description of the Stripe relationship, and the data-processing terms relied on.
08Inspection photographs
Photographs taken during a visit are held as internal working records. They may show the interior of a property and, incidentally, a resident’s belongings. They are visible to the engineer who took them and to Haven administrators, and are not shown in the customer portal.
OPERATIVE CLAUSE PENDING LEGAL DRAFT
LEGAL REVIEW REQUIRED — the lawful basis for holding photographs of a tenanted property, what tenants must be told, and how long the images are kept.
09Tenant data
Where an agent or landlord gives us a tenant contact, the basis on which we hold and use it, and what the tenant can ask of us directly.
OPERATIVE CLAUSE PENDING LEGAL DRAFT
10Complaints
How to complain to us, and the right to complain to the Information Commissioner.
OPERATIVE CLAUSE PENDING LEGAL DRAFT
BUSINESS INFORMATION REQUIRED — the ICO registration number, and confirmation of the address complaints should be sent to if it is not the registered office.
DOCUMENT STATUS: DRAFT · NOT APPROVED FOR PUBLICATION
5 OF 10 SECTIONS ALSO AWAIT INFORMATION FROM THE BUSINESS