1. Who we are
Billinge Diving and Marine Services Ltd, trading as LiftPlanProUK, is registered in England and Wales under company number 09650339. Registered office: 39 Market Street, Wesham, Preston, PR4 3AY. VAT registration number: 114 2256 55.
We are the controller of account, customer, billing, support, website and service-administration data. Contact us at info@LiftPlanProUK.com.
Where a Customer enters personal data about its personnel, contractors or other project participants into a lift plan, the Customer will normally be the controller and we act as its processor. Our Data Processing Agreement applies to that processing.
2. Personal data we collect
Depending on how the Service is used, we may collect:
- Account and business data: name, display name, email address, company name, role, account permissions and authentication records;
- Subscription and payment data: selected plan, billing status, transaction and Stripe references, subscription start and renewal/end dates, invoices and VAT records. Full payment-card details are handled by Stripe and are not stored by LiftPlanProUK;
- Lift-plan and project data: project and site details, plans, equipment selections, calculations, drawings, photographs, uploaded records and supporting documents;
- Personnel and competence data: names, roles, employer, card or registration numbers, qualifications, expiry dates, verification information and electronic or drawn signatures entered for Appointed Persons, operators, supervisors, slinger/signallers and other personnel;
- Communications: enquiries, support requests, review instructions, feedback and correspondence;
- Technical, security and consented analytics data: IP address, browser/device information, session and login records, diagnostic events, access logs, security records and, where analytics consent is given, pages viewed and interaction timing; and
- Marketing preferences: whether you have requested information or opted in or out of marketing.
Please do not enter health information, criminal-offence data or other special-category data unless it is genuinely necessary, lawful and specifically authorised by the relevant controller.
3. Where data comes from
We receive data directly from Users and Customers, from people who contact us, from the device used to access the Service, from Stripe in connection with payment, and from other Users who add authorised project or workforce information. Where an employer or Customer provides your data, it is responsible for ensuring that it has a lawful basis and gives you appropriate privacy information.
4. Purposes and lawful bases
- Contract: creating and administering accounts, providing plan-building and review services, processing subscriptions, responding to support and delivering purchased services;
- Legitimate interests: securing the Service, preventing misuse and fraud, maintaining audit and operational records, improving functionality, managing business relationships, establishing or defending claims and sending proportionate business-to-business service communications. We consider and balance these interests against individual rights;
- Legal obligation: accounting, tax, regulatory compliance, lawful requests, data-protection duties and records required by law; and
- Consent: where consent is specifically requested, including Google Analytics cookies and certain electronic marketing. Consent may be withdrawn at any time.
The Customer determines the lawful basis for personal data it places in lift plans. We process that data only to provide, secure and support the Service and in accordance with the Customer's documented instructions and the Data Processing Agreement.
5. Who receives personal data
We disclose data only where reasonably necessary to:
- Floot and infrastructure providers used to host, store, secure and operate the application, database, files and service communications;
- Stripe for payment processing, fraud prevention and subscription administration. Stripe also handles relevant payment data under its own privacy terms;
- Google, where you consent to Google Analytics, for website and app usage measurement;
- professional advisers, insurers, auditors and contractors bound by confidentiality;
- law-enforcement, courts, regulators, tax authorities or other bodies where disclosure is required or lawfully necessary; and
- a purchaser or successor in connection with a genuine business sale, restructuring or transfer, subject to appropriate safeguards.
We do not sell personal data.
6. International transfers
Some service providers or their infrastructure may process data outside the United Kingdom. Where UK personal data is transferred internationally, we require an applicable adequacy arrangement or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum, together with supplementary measures where needed.
7. Retention
We retain personal data only for as long as reasonably necessary for the purpose collected. Retention is determined by the life of the account or contract, the Customer's instructions, statutory tax and accounting periods, safety and document-control needs, limitation periods, disputes, security requirements and backup cycles.
Customer content is normally kept while the account or relevant service remains active and for a limited period afterwards to allow orderly closure, recovery or the handling of a claim, unless the Customer requests earlier deletion and no legal or overriding reason requires retention. Payment, invoice and core contractual records may be kept for up to six years after the relevant transaction or relationship. Deleted data may remain in protected backups until the normal backup cycle overwrites it.
8. Security
We use proportionate technical and organisational measures including access controls, authenticated accounts, password hashing, encrypted network connections, secure session cookies, restricted administrative access, payment processing through Stripe, backups, logging and supplier controls. No online service can be guaranteed completely secure, and Customers must protect their credentials and promptly report suspected misuse.
9. Your rights
Subject to applicable conditions and exemptions, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing.
If your information was entered by your employer or another Customer, we may need to refer the request to that controller. We may verify identity before acting. Requests can be sent to info@LiftPlanProUK.com.
10. Marketing
We may send relevant service or business communications where permitted by law. Marketing consent is not a condition of using LiftPlanProUK. Every direct-marketing message will provide a way to opt out, and we may retain a minimal suppression record so that the opt-out is respected.
11. Automated tools and safety outputs
LiftPlanProUK performs calculations, validation checks and RAG screening to assist Users. These tools do not make solely automated decisions producing legal or similarly significant effects about individuals. They are planning prompts only and do not determine competence or approve a lifting operation.
12. Cookies and related storage
Information about essential session cookies, Stripe payment technology, browser storage and consent-based Google Analytics is set out in our Cookie Notice. Analytics consent can be changed at any time through the Cookie settings control.
13. Complaints and changes
Please contact us first so we can try to resolve any concern. You may also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
We may update this Notice when the Service, suppliers or law changes. Material changes will be identified through the Service or by email where appropriate.