Privacy notice

Last updated: 20 August 2026

What we collect

We collect the contact, company and compliance information you submit, together with files you choose to provide for an audit.

Why we use it

We use this information to deliver your requested readiness audit, communicate about it, protect the service and improve our evidence-management process. We do not sell your information.

How long we keep it

During the concierge pilot, audit documents should be deleted within 90 days after delivery unless you ask us to retain them or become a customer. Contact and audit-summary records may be kept for legitimate business administration.

Your choices

You may ask for access, correction or deletion by emailing privacy@credencehq.co.uk. Before launch, replace this concise MVP notice with a solicitor-reviewed policy naming the legal entity and registered address.

Security

Files are stored in a private bucket and accessed only by authorised CredenceHQ reviewers. No web service can promise absolute security, so please avoid submitting passwords, special-category personal data or employee records not needed for the audit.