Privacy Policy

Last updated: 11 August 2026

This policy explains what personal data the UK Centre for Mould Safety CIC ("UKCMS", "we", "us"), a Community Interest Company, collects through ukcms.org.uk (the "Site"), why, and what rights you have over it. We're the data controller for the personal data described here.

1. What we collect

  • Contact form: name, email, phone number and message content, plus any resources you request (e.g. the DIY guide or Mould Essentials pack).
  • National Register applications: your name, business details, region/postcode, certifications, services offered, bio, phone, email and website — used to build a directory listing — plus payment details, handled directly by our payment provider (Stripe); we don't see or store your card details.
  • Professional accounts: your email address, used to send magic-link sign-in emails and account notifications.
  • Guide Me navigator: your answers (situation, tenure, vulnerability, extent of damage) are used to generate guidance during your session. We don't require an account to use the navigator.
  • Usage data: standard technical data such as IP address and browser type, collected automatically by our hosting infrastructure for security and reliability.

2. Why we use it

  • To respond to enquiries and provide the guidance, resources or directory listing you've asked for.
  • To process National Register applications and membership payments.
  • To operate professional accounts and send you service-related emails (e.g. verification reminders, renewal reminders, application decisions).
  • To keep the Site secure and working properly.

Our legal basis is generally that processing is necessary to provide the service you've requested (contract), or our legitimate interest in running the Site and directory. Where we ask for explicit consent (e.g. optional marketing resources), you can withdraw it at any time.

3. Who we share it with

We share data with the service providers that help us run the Site: our payment processor (Stripe) for membership payments, our email delivery provider for transactional emails, and our hosting/infrastructure providers. We don't sell your personal data. A National Register listing's public details (name, business info, certifications, services, region) are, by design, shown publicly in the directory.

4. How long we keep it

We keep contact form and application data for as long as reasonably needed to handle your enquiry or membership, plus a reasonable period afterwards for record-keeping. Directory listing data is kept for as long as your membership is active, plus a limited period after expiry in case of renewal or dispute.

5. Your rights

Under UK GDPR you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these, email contact@ukcms.org. You can also complain to the Information Commissioner's Office (ico.org.uk) if you think we've mishandled your data.

6. Cookies

We use a small number of strictly necessary cookies to keep the Site working (for example, remembering your cookie choice, and signing in to a professional account). With your consent, we also use Google Analytics to understand how the Site is used — these cookies are only set if you accept them in the cookie notice, and you can withdraw consent at any time by clearing your browser's cookies for this Site. We don't use advertising cookies. See the cookie notice shown on the Site for details.

7. Children

The Site is intended for adults managing or seeking help with property issues, and isn't directed at children.

8. Changes to this policy

We may update this policy from time to time; the "last updated" date above will change when we do.

9. Contact

Questions about this policy or your data can be sent to contact@ukcms.org.

This is a general-purpose summary and hasn't been through a full legal review — treat it as a starting point rather than finished legal copy, especially given the Site processes payment and application data.