Privacy Policy

Draft — pending legal review. Transport Technical Innovation Ltd is the data controller for BikeCheck. This explains what we process and why, under UK GDPR.

1. Data we process

• Account data: name and email from your chosen sign-in provider (Google).
• Licence + device data: licence code, device identifiers, and binding state.
• Result records: brake-test results and associated vehicle registration and timestamps.

2. Where data is held

All backend data is stored in Google Cloud europe-west2 (London) for UK data residency. CSV result blobs are encrypted with a per-tenant key; deleting that key renders them unreadable (the cryptographic-erasure path for the right to erasure).

3. Lawful basis

We process account and licence data to perform our contract with you, and result data to provide attestation/certification and meet record-keeping obligations.

4. Retention

Certification-relevant records are retained for the statutory period; backups age out per policy.

5. Your rights

You may request access, correction, or erasure of your personal data, subject to record-keeping obligations. Contact us via bikecheck.ttil.net.

6. Cookies

We use strictly-necessary cookies only (session + CSRF); no advertising or tracking cookies.