Privacy policy

This policy explains what personal information MobReady collects, why we collect it, how we keep it safe and the rights you have. We've tried to keep it plain and short.

Who we are

MobReady is run by [Company name] Ltd, registered in England and Wales (company number [Company number]), at [Registered address]. We are the data controller for the information described here and are registered with the Information Commissioner's Office (ICO), registration number [ICO registration number].

You can contact us about anything in this policy at hello@mobready.co.uk.

What we collect

Certificates can include personal details such as your date of birth. Medical certificates show that you have been assessed as fit to work offshore. Please only upload what you need to share for work. We only use your certificates to provide the service to you, and you decide who sees them.

Who can see your information

Nobody can see your certificates unless you send them a share link. A share link shows your name, the certs you picked, their expiry dates and your Vantage number if you included it. Once you've shared a link and someone has downloaded files, they are responsible for how they use them.

We use a small number of trusted companies to run the service. They only process your information on our instructions:

• Stripe handles payments. Your card details go straight to Stripe and we never see them.
• [Hosting company] hosts the website, database and stored files in the UK.
• [Email provider] sends account emails and reminders.

We don't sell your information and we don't use it for advertising. We'll only share it with anyone else if the law requires us to.

Where your information is kept

Your data is stored in the UK. Some of our suppliers, such as Stripe, may process data outside the UK. Where they do, they use approved safeguards such as the UK International Data Transfer Agreement.

How long we keep it

• While your account is open, we keep your information so the service works.
• If your subscription stops, we keep your data so you can pick up where you left off. If your account has been unpaid and unused for 24 months, we'll email you and then delete it.
• If you delete your account, we delete your details and files straight away, apart from backups, which are cleared within 30 days.
• We keep payment records for six years because the law requires it.

Keeping it safe

The site uses HTTPS throughout. Certificates are stored outside the public part of the website and can only be opened through checked links that expire. Passwords are scrambled using strong one way hashing. Share links use long random codes, work once or for a limited time, and every use is logged.

Your rights

You have the right to:

• get a copy of your information (you can download it all from the Me page in the app)
• ask us to correct anything that's wrong
• ask us to delete your information (you can delete your account from the Me page)
• object to or ask us to limit how we use your information
• ask for your information in a format you can take elsewhere

To use any of these rights, email hello@mobready.co.uk. We'll reply within one month. If you're unhappy with how we've handled your information, you can complain to the ICO at ico.org.uk or on 0303 123 1113.

Cookies

We only use cookies that are needed for the site and app to work. We don't use tracking, analytics or advertising cookies.

We also remember on your device that you've closed the cookie notice, so it doesn't keep appearing.

Changes to this policy

If we make important changes, we'll let you know by email or in the app before they take effect.