Legal
Privacy policy
How Kerova looks after personal data on the website and in the app.
3. Privacy Policy
This policy explains how Kerova Ltd uses personal information on kerova.co.uk and app.kerova.co.uk. Kerova Ltd, company no. 17503897, 128 City Road, London, EC1V 2NX, is registered with the Information Commissioner's Office, registration number ZC268850. Contact: admin@kerova.co.uk. Last updated: 10 October 2026.
3.1 Two roles
- For our own website, enquiries, customer accounts and billing, Kerova is the controller.
- For certificate, site and client data that fire and security firms put into the app, the firm is the controller and Kerova is its processor. If you are a client of one of those firms, contact the firm first about your data.
3.2 What we collect and why
| What | Why | Lawful basis |
|---|---|---|
| Name, company, email, phone from the contact form or emails | To reply and to set up a trial or account | Legitimate interests; steps before a contract |
| Account details of users (name, work email, role) | To give access to the app | Contract |
| Billing contact and invoice details | To bill customers | Contract; legal obligation |
| Basic usage and security logs (no personal data written to logs) | To keep the service secure and working | Legitimate interests |
| Business contact details from LinkedIn or public sources | To contact fire and security firms about Kerova | Legitimate interests |
The free tools at kerova.co.uk/tools work without an account. Figures you type into them stay on your device and are not sent to us.
3.3 Who we share it with
Our hosting provider Google (Firebase and Google Cloud), Resend for app emails, Anthropic for the app's AI features, Mapbox for route planning, Xero if a customer connects it, Formspree for the website contact form, Plausible for website visitor statistics, and our accountant and professional advisers where needed. We never sell personal information.
3.4 Where it is stored
App data is stored in the UK, in Google's London region. Some providers (Resend, Anthropic, Mapbox, Formspree and parts of Google's sign-in service) process data in the USA, under an approved safeguard such as the UK Extension to the Data Privacy Framework or the UK International Data Transfer Addendum.
3.5 How long we keep it
- Enquiries that don't become customers: up to 12 months.
- Customer account data: while the account is active, plus 30 days to export, then deleted.
- Billing records: 6 years, as required for tax.
3.6 Your rights
You can ask to access, correct or delete your information, object to or restrict how we use it, or ask for a copy to take elsewhere. Email admin@kerova.co.uk and we will reply within one month. You can also complain to the ICO at ico.org.uk or on 0303 123 1113.
3.7 Cookies
We do not use advertising or tracking cookies. The website uses Plausible, which counts visits without cookies or personal identifiers. The app uses browser storage only to keep you signed in, remember a few settings and work offline.
3.8 Changes
We will update this page if anything changes and show the date at the top.