How TickSure uses your data

1. Who we are

TickSure is operated by Callum Grant trading as TickSure. TickSure provides digital checklists, operational records, reports and related business-management tools. For account, website, billing, support and marketing data, TickSure acts as the data controller. For information a customer enters about its own staff, customers or operations while using TickSure, that customer will usually be the data controller and TickSure acts as a processor on its behalf.

Privacy enquiries can be sent to info@ticksure.co.uk.

2. Information we may collect

Depending on how TickSure is used, we may process account and contact details, login and security information, business and site details, team-member details, checklist answers, timestamps, comments, photographs or uploaded evidence, signatures where enabled, support messages, billing information, usage records and technical logs.

3. Why we use personal information

We use personal information to provide and secure the service, authenticate users, manage accounts and permissions, keep operational and audit records, provide support, process subscriptions and payments, send service communications, prevent misuse, improve reliability and meet legal obligations.

Our legal bases may include performance of a contract, legitimate interests, compliance with legal obligations and consent where consent is required, including for optional marketing cookies.

4. Customer records and audit history

TickSure is designed to preserve completed operational records so businesses can evidence what was done, when and by whom. Customers should only collect personal data they have a lawful reason to record. Where customers configure tasks that collect photographs, signatures or other personal information, the customer is responsible for deciding whether that collection is appropriate and lawful.

5. Who we share information with

We use carefully selected service providers to operate TickSure. Depending on the feature used, these may include Supabase for database, authentication and storage; Stripe for payments; Resend for transactional email; Twilio for SMS; Cloudflare for website delivery and infrastructure; Meta for consented advertising measurement, and Google (Google Analytics 4 and Google Tag Manager) for website analytics, consent-aware measurement and management of tracking tags.

Providers only receive information needed for the service they supply and may process information outside the UK. Where required, appropriate international-transfer safeguards are used by the relevant provider.

For processing on behalf of business customers, see our Data Processing Agreement.

6. Security

TickSure uses authenticated access, business and site permissions, database row-level security, private storage for record evidence, restricted privileged functions and server-side credentials for sensitive integrations. No online service can guarantee absolute security, but we apply technical and organisational measures designed to reduce unauthorised access, loss or misuse.

7. Retention

We keep personal information only for as long as needed for the purpose it was collected, to provide the service, maintain legitimate audit records, resolve disputes and meet legal or accounting obligations. Completed business records may be retained as part of a customer's audit history. Retention periods are reviewed and may vary according to record type and customer instructions.

8. Your data protection rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict personal information, object to certain processing, receive portable data, or withdraw consent. Where TickSure processes information only on behalf of a customer, requests relating to that customer's records may need to be handled by the customer as controller.

To make a request, email info@ticksure.co.uk. We may need to verify your identity before acting on a request.

9. Cookies and marketing technologies

Essential technologies support login, account security and privacy choices. We use Google Tag Manager to manage measurement tags, Google Analytics 4 for website traffic reporting and Meta Pixel for consented marketing measurement. Our Google Consent Mode V2 implementation starts with advertising and analytics storage and advertising-related consent denied; after a visitor accepts optional cookies, the relevant Google settings are granted and the Meta Pixel can load. In the consent-denied state, Google tags may still transmit limited cookieless measurement signals (advanced consent mode), without using optional analytics or advertising cookies. Visitors can reject optional cookies or change their choices at any time via our Cookie Policy, which also explains browser-based cookie removal.

10. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office if you are unhappy with how your personal information has been handled.

11. Changes to this notice

We may update this notice as TickSure changes. The current version and effective date will always be shown on this page.