Privacy Notice
Version 2. Last updated 11 October 2026.
This notice explains how RMCMS LTD, trading as CertifySpace, collects and uses personal data when you use CertifySpace.com, whether you are a customer looking for a professional or a professional offering services.
1. Who we are
RMCMS LTD ("we", "us") is the controller of your personal data. We are registered in England and Wales, company number 17318401, registered office 32 Trafalgar Drive, Brooklands, Milton Keynes, England, MK10 7ER.
For anything about your data, email legal@certifyspace.com or write to us at our registered office.
2. The data we collect
If you are a customer:
- Request details: the service you need, your postcode, property address, property type and size, timing, and anything you tell us about the job.
- Contact details: your name, email address and phone number.
- Account details, if you create an account: your login email and password (stored only in encrypted form).
- Activity: the Quotes you receive and accept, messages with professionals, bookings, and reviews you leave.
If you are a professional:
- Business and contact details: your name, business name, Companies House number, address, email, phone number and service areas.
- Verification details: accreditation memberships and numbers, insurance documents, and the results of our identity and accreditation checks.
- Activity: Quotes, messages, Connect Token purchases and balance, contacts bought, reviews received, and your response record.
- Payment details: your card details are collected and held by Stripe. We see only the card type, the last four digits and the expiry date.
From everyone:
- Technical data: IP address, browser and device type, pages visited, and error logs.
- Consent records: when you accepted our terms, made a cookie choice or signed up to emails, with your IP address and browser.
- Support: emails, complaints, and call recordings if you phone us.
- Newsletter: your email address, if you sign up for property tips.
We do not ask for special category data, such as health or ethnicity. Please do not include it in your Request or messages.
3. Where we get it
Most data comes directly from you. We also receive data from:
- professionals and customers, through messages and reviews;
- public registers and accreditation bodies, such as Companies House, the Gas Safe Register, RICS, the SRA and EPC accreditation schemes, when we verify a professional; and
- Stripe, which tells us whether a payment succeeded.
4. How we use it and our lawful basis
| What we do | Lawful basis |
|---|---|
| Match your Request to suitable professionals and show you their Quotes | Contract, to provide the service you asked for |
| Share a customer's contact details with a professional when a Quote is accepted or a contact is bought (see section 5) | Contract, and our legitimate interest in running the introduction service you used |
| Create and manage accounts, and keep you signed in | Contract |
| Verify professionals' identity, accreditations and insurance | Legitimate interests: keeping the Platform safe and trustworthy |
| Take payment for Connect Tokens and subscriptions | Contract |
| Send service messages, such as new Quotes, acceptances and booking updates | Contract |
| Publish reviews | Legitimate interests: helping customers choose |
| Rank professionals and detect fraud, spam and attempts to share contact details early | Legitimate interests: running a fair, secure Platform |
| Handle complaints, support requests and disputes | Legitimate interests, and legal obligation where it applies |
| Keep financial and tax records | Legal obligation |
| Send the monthly property tips email | Consent, which you can withdraw at any time |
| Use analytics or marketing cookies | Consent (see our Cookie Policy) |
| Record calls for training and quality | Legitimate interests; we tell you at the start of the call |
5. Who we share it with
Professionals. As a customer, your details are shared with professionals in two ways:
- Quotes: a professional who sends you a Quote sees your job details and postcode area, but not your name, phone, email or full address until you accept their Quote.
- Direct contact: a professional may pay to receive your contact details so they can contact you about your Request. For an Open Request, up to 5 professionals may do this.
Once a professional receives your details, they become a separate controller and are responsible for how they use them. Our Professional Terms only allow them to use your details for your Request.
Customers. As a professional, your business name, profile, services, accreditations, verification status and reviews are shown publicly. When you send a Quote or buy a contact, the customer sees your business details.
Our service providers (processors). They act only on our instructions:
| Provider | What they do |
|---|---|
| Lovable | Hosts the website and app |
| Supabase | Database, user accounts and file storage |
| Cloudflare | Image storage, content delivery and security |
| Stripe | Payments and fraud prevention |
| Our email and SMS providers | Sending service messages and the newsletter |
| Verification providers | Identity and business checks on professionals |
Others, only where needed: our professional advisers, police or regulators if the law requires it, and a buyer of our business if we sell it.
We never sell your personal data.
6. International transfers
Some of our providers process data outside the UK, including in the European Economic Area and the United States. When they do, we rely on a UK adequacy decision (including the UK-US Data Bridge where the provider is certified) or on the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep it
| Data | How long |
|---|---|
| Requests that are never accepted or bought | 24 months after the Request, then deleted |
| Accepted Quotes, bookings and messages | 6 years after the Request closes (for disputes and claims) |
| Customer and professional accounts | While the account is open, then 6 years after closure for transaction records; profile data is deleted or anonymised sooner |
| Payment and tax records | 6 years from the end of the financial year |
| Verification records for professionals | While the account is open, then 6 years |
| Reviews | While the professional's profile is live; the reviewer is shown by first name and initial only |
| Complaints | 6 years after the complaint is closed |
| Call recordings | 90 days, unless needed for a complaint |
| Newsletter subscriptions | Until you unsubscribe |
| Consent and cookie records | 6 years |
| Technical logs | Up to 12 months |
8. Your rights
You have the right to:
- access your personal data;
- correct inaccurate data;
- have your data deleted, where we no longer need it;
- restrict or object to how we use it, including objecting to anything based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, without affecting what we did before; and
- object to direct marketing at any time.
You can update most details in your account settings. For anything else, email legal@certifyspace.com. We will reply within one month. We may ask you to prove your identity first.
If you asked a professional to do work, they hold their own copy of your details. To exercise your rights over that copy, contact the professional directly.
9. Automated decisions
We use automated systems to match Requests to professionals, rank professionals and flag possible fraud or contact-sharing. These do not make decisions with legal or similarly significant effects on you without human review. If an automated flag leads us to restrict a professional's account, a person reviews it and we give reasons (see our Professional Terms).
10. Security
We use encryption in transit, access controls, and providers with recognised security standards. Customer contact details are hidden from professionals until they are released under section 5. No system is completely secure, so please keep your password safe and tell us at once if you think your account has been misused.
11. Age
CertifySpace is for people aged 18 and over. We do not knowingly collect data from children.
12. Complaints
If you are unhappy with how we use your data, please contact us first at legal@certifyspace.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
13. Changes
We will update this notice when our use of data changes and change the date at the top. We will tell you about significant changes by email or on the Platform.