Contents
01 Who we are
PATKeeper is a web application that helps electrical test engineers and PAT testing companies import, organise, and report on portable appliance test data. Throughout this policy, "we," "us," and "the service" refer to PATKeeper; "you" refers to the person or company using it.
If you're using PATKeeper to store test data about your own clients' assets, it's worth understanding that you are the data controller for that client data, and PATKeeper acts as a data processor on your behalf. We are the data controller only for your own account information (e.g. your login email, company details, billing status).
02 What data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, hashed password (or SSO identity from Google/Microsoft/Apple), account creation date | You, or your SSO provider |
| Company details | Your company name, address, phone, email, logo | You |
| Client & test data | Your clients' names/addresses, asset details, test results, certificates generated | You (typed, imported, or edited) |
| Billing data | Subscription status, trial dates; card details are handled entirely by our payment processor and never touch our own servers | You, and our payment processor |
| Technical data | Browser type, general device type (for making the app work responsively) — we do not currently run analytics or tracking scripts | Automatically, in your browser only |
03 How we use your data
- To provide the core service: storing and displaying your test records, generating certificates and reports
- To authenticate you and keep your account (and only your account) secure
- To bill you correctly for your subscription and any additional user logins
- To respond to support requests you send us
- To meet legal obligations, such as responding to a valid legal request
We do not sell your data, or your clients' data, to anyone. We do not use your test data to train any AI model.
04 Our legal basis for processing
Under UK/EU GDPR, we rely on:
- Contract — processing your account and usage data is necessary to provide the service you've signed up for
- Legitimate interests — for basic security, fraud prevention, and keeping the service running reliably
- Consent — where we ask for it specifically, e.g. optional future marketing emails (we do not currently send any)
06 International data transfers
Our infrastructure providers may process data in countries outside your own, including the United States, under their own standard contractual safeguards (such as the EU Standard Contractual Clauses). Where this applies, we rely on the safeguards those providers already have in place as part of their own compliance programmes.
07 How long we keep data
- Your account and test data is kept for as long as your account is active
- If you cancel your subscription, your data remains accessible for a reasonable grace period in case you resubscribe, after which it may be deleted
- You can request deletion of your account and all associated data at any time (see "Your rights" below)
- Backup copies you download yourself are entirely under your own control once downloaded
08 How we protect your data
- All data in transit is encrypted (HTTPS/TLS)
- Your data is protected by Row Level Security at the database level, meaning even in the event of a bug elsewhere in the application, the database itself enforces that one account can never read another account's data
- Passwords are never stored in plain text — authentication is handled by Supabase's secure authentication system
- Access to production infrastructure is limited to those who need it to operate the service
No system is 100% secure, and we can't guarantee absolute security — but we've built this with real safeguards rather than relying on obscurity.
10 Your rights
Under UK/EU GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate data (you can do most of this yourself directly in the app)
- Erasure — request deletion of your account and data
- Portability — export your data yourself at any time via the built-in CSV/database export and backup tools
- Restriction & objection — ask us to limit or stop certain processing
- Complain — lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority
To exercise any of these rights, contact us using the details below.
11 Children's privacy
PATKeeper is a professional tool intended for use by adults working in electrical testing. It is not directed at, and we do not knowingly collect data from, children.
12 Changes to this policy
We may update this policy from time to time as the service evolves. We'll update the "last updated" date at the top of this page when we do. Continued use of the service after a change means you accept the updated policy.
13 Contact us
Questions about this policy, or want to exercise any of your data rights? Contact us at:
[Insert your contact email here — e.g. privacy@pattestmanager.com]