Privacy Policy

1. Who we are

Ezetu is provided by Ezetu Limited, a company registered in England and Wales (company number 13588450). Our registered office is Flat 72 Crown Court, Crown Street, Portsmouth, England, PO1 1QW.

For personal data about the people who sign up to and use Ezetu, and visitors to our website, we are the controller. For the data our customers store about their own clients and staff, our customer is the controller and we are their processor — see section 11.

2. Information we collect

Information you give us

• Account details — your name, email address, password (stored in hashed form, never in plain text), business name, and role.
• Business information — your business details, branding, currency and settings.
• Content — anything you or your team add to the Service: clients, properties and addresses, jobs, checklists and photos, invoices, quotes, payroll and expense records, contracts and documents.
• Correspondence — messages you send us, for example support requests.

Information collected automatically

• Technical data — IP address, browser and device type, and the date and time of requests, which our hosting providers record in server logs for security and troubleshooting.
• Signing records — when someone signs a contract in Ezetu, we record their name, the time of signing and their IP address as evidence of the signature.

3. How we use information

We only use personal data where the law allows. We use it to:

4. How we share information

We do not sell personal data. We share it only with:

• Service providers who help us run Ezetu, under contracts that require them to protect it and only use it on our instructions: Supabase (database, sign-in and file storage), Resend (email delivery), and our website hosting provider.
• People in your Workspace — information is shared with other members of your Workspace according to their role. For example, staff only see their own jobs, earnings and documents.
• People you choose to send things to — such as clients receiving an invoice, a contract to sign, or a checklist link.
• Authorities and advisers — where required by law, to protect our rights, or to our professional advisers.
• A buyer of our business — if our business is sold or reorganised, in which case this policy will continue to apply to your data.

5. Security

We take appropriate technical and organisational measures to protect personal data, including:

• encryption in transit (HTTPS/TLS) for all connections to the Service;
• hashed passwords and expiring, single-use invite and signing links;
• workspace isolation and role-based access rules enforced in the database, so one business can never read another’s data;
• regular backups by our database provider.

No system is completely secure. If we become aware of a personal data breach that affects you, we will tell you and, where required, the Information Commissioner’s Office.

6. Marketing and your choices

We may email account holders about Ezetu features and offers. Every marketing email includes a way to unsubscribe, or you can email support@ezetu.co.uk. Opting out of marketing does not stop service emails we need to send, such as security or billing messages. We never send marketing to your clients or staff.

7. Cookies and local storage

Ezetu uses only strictly necessary cookies and browser storage: to keep you signed in, protect your session, and remember display preferences in your browser. These are needed for the Service to work, so they do not require consent.

We do not use advertising or third-party tracking cookies. If we ever add analytics or other non-essential cookies, we will update this policy and ask for your consent first.

8. How long we keep information

We keep account information for as long as your account is active. If you cancel, we keep your Workspace data for 30 days so you can request a copy, then delete it, as described in our Terms of Service.

We keep billing and accounting records for as long as UK tax law requires (normally six years). Server logs and backups are kept for a limited period and then overwritten.

9. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, or its use restricted, in some circumstances;
• object to our use of your data based on legitimate interests, including for marketing;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on consent.

To use any of these rights, email support@ezetu.co.uk. We will respond within one month. If your data is held in a business’s Workspace (for example, you are a cleaning client or a member of staff), please contact that business first — we will help them respond.

10. International transfers

Some of our service providers may store or process data outside the UK. Where they do, we make sure the transfer is protected — for example, by transferring only to countries the UK government has approved as adequate, or by using the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

11. Data you store in Ezetu

When you store personal data about your clients, staff or other people in your Workspace, you are the controller and we process it on your behalf. As your processor, we will:

• process it only to provide the Service and on your documented instructions (which are these terms and your use of the Service);
• ensure that our staff with access are bound by confidentiality;
• keep it secure using the measures in section 5;
• only use the sub-processors listed in section 4, and tell you before we add or replace one so you can object;
• help you respond to requests from individuals and meet your security, breach-notification and impact-assessment obligations;
• notify you without undue delay after becoming aware of a personal data breach affecting your data;
• delete or return your data when your subscription ends, as set out in section 8;
• give you the information needed to show compliance with these obligations.

You are responsible for having a lawful basis for the data you add and for telling the people concerned how you use it.

12. Children

Ezetu is a business tool and is not intended for anyone under 16. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. We will tell account holders about significant changes by email or in the Service.

14. Contact us and complaints

For any privacy question or request, email support@ezetu.co.uk or write to Ezetu Limited, Flat 72 Crown Court, Crown Street, Portsmouth, England, PO1 1QW.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to resolve your concern first.