KEATTS PRIVACY POLICY
Last updated: 23 September 2026
Keatts Group Ltd (“Keatts”, “we”, “us” or “our”) respects your privacy
and is committed to protecting personal information.
This Privacy Policy explains how we collect, use, store, disclose and
protect personal information when you use the Keatts mobile application,
the Keatts website and related services (together, the “Services”).
Keatts is a business-management application designed to help businesses
manage clients, jobs, quotations, employees, expenses, project
information, documents and related business activities.
1. WHO WE ARE
The Services are operated by:
Keatts Group Ltd
15A Wellington Road
Enfield
EN1 2PD
United Kingdom
ICO Registration Reference: ZC156083
Website: https://keatts.co.uk/app
Email: info@keatts.co.uk
Keatts Group Ltd is registered with the UK Information Commissioner’s
Office (ICO).
For privacy, personal-data, account or data-deletion enquiries, please
contact us using the details above.
2. SCOPE OF THIS PRIVACY POLICY
This Privacy Policy applies to personal information processed through
the Keatts mobile application, our website and related Services.
Keatts supports different authorised user roles, including business
account holders, Clients and Employees. A business using Keatts may
enter personal information relating to its clients, employees,
subcontractors and other individuals.
Where a business determines why and how personal information about its
own clients, employees or other individuals is processed, that business
may act as the data controller and Keatts may process that information
on that business’s behalf.
Businesses using Keatts are responsible for ensuring that they have an
appropriate lawful basis and authority to enter, upload, use and
otherwise process personal information relating to other individuals.
3. INFORMATION WE MAY PROCESS
The information processed through Keatts depends on the features used
and the information supplied by users or organisations.
3.1 Account and Identity Information
This may include:
– Name;
– Email address;
– User and account identifiers;
– Account role, such as Builder, Client or Employee;
– Authentication and account-status information; and
– Information required to create, secure and maintain an account.
Authentication is provided through our authentication infrastructure.
Keatts does not intend to store users’ passwords as readable plain text.
3.2 Client and Customer Information
This may include:
– Names;
– Telephone numbers;
– Email addresses;
– Home, business or site addresses;
– Job descriptions and job details;
– Site-visit information; and
– Project and customer records.
3.3 Quotes, Contracts, Jobs and Projects
This may include:
– Quotations and quote items;
– Labour, material and pricing information;
– Client acceptance information and signatures;
– Change orders;
– Contracts and contract attachments;
– Job and project information;
– Payment plans; and
– Project financial information.
3.4 Employee and Workforce Information
Where employee-management features are used, information may include:
– Employee names and contact information;
– Job role;
– Date of birth;
– Employment type;
– Working hours;
– Employment start and end dates;
– Pay and salary information;
– Payment frequency;
– Bank or payment information entered by the business;
– National Insurance information entered into the App;
– Pension information;
– Student-loan information;
– Overtime information;
– Assigned sites and work information;
– Payslips; and
– Employment-related and termination-related documents.
Businesses using Keatts are responsible for ensuring that they have an
appropriate lawful basis for processing employee information through the
Services.
3.5 Expenses and Financial Information
The Services may process business and project financial information
including:
– Business and job expenses;
– Expense categories;
– Receipts;
– Materials costs;
– Subcontractor costs;
– CIS information;
– VAT information;
– Wages and employee payments;
– Sales information;
– Profit and loss information;
– Corporation-tax estimates or information; and
– Other accounting and project-financial records entered by users.
Keatts is a business-management tool. Information and calculations shown
by the Services are not a substitute for professional accounting, tax,
legal or financial advice.
3.6 Photos, Videos, Files and Documents
Users may choose to upload or store content including:
– Project photographs;
– Project videos;
– Receipts;
– Contracts;
– Quotes and PDFs;
– Change-order documents;
– Employee documents;
– Payslips;
– Signatures;
– Snagging photographs and videos; and
– Other files and project documents.
Files uploaded by users may themselves contain personal or sensitive
information. Users and businesses are responsible for ensuring that they
are entitled to upload and process that content.
3.7 Snagging, Materials and Supplier Information
The Services may process:
– Snagging items;
– Notes and descriptions;
– Photos and videos;
– Assigned work;
– Status information;
– Materials lists;
– Requests for quotation (RFQs);
– Merchant or supplier information;
– Delivery information;
– Pricing enquiries; and
– Related project records.
3.8 Device, Notification and Technical Information
To operate the Services and provide notifications, we may process
technical information such as:
– Push-notification or Firebase Cloud Messaging (FCM) tokens;
– Device or application identifiers required for service operation;
– Authentication and session information;
– Synchronisation and revision information; and
– Technical logs and error information where generated by our service
providers.
Keatts does not currently request broad Android permissions to read a
user’s entire photo, video, audio or external-storage library. Where
users choose files, photos or videos, the App uses appropriate
user-initiated selection and app-specific storage mechanisms.
4. WHERE INFORMATION COMES FROM
Information may be provided directly by:
– The account holder;
– A business using Keatts;
– A Builder or administrator entering client or employee information;
– A Client or Employee using an authorised account; or
– The user’s device where necessary to operate authentication,
synchronisation, notifications and other requested functionality.
Some individuals’ information may therefore be entered into Keatts by
the business that employs them, provides services to them or manages the
relevant project.
5. HOW WE USE INFORMATION
We process information only for purposes connected with providing,
securing, supporting and lawfully operating the Services.
These purposes may include:
– Creating, authenticating and managing user accounts;
– Providing Builder, Client and Employee role-based access;
– Managing clients, jobs, projects and assigned sites;
– Creating, managing, generating and sharing quotations, PDFs and
change orders;
– Managing contracts, payment plans and project records;
– Managing employee records, assigned work and payslips;
– Recording expenses, receipts and business or project financial
information;
– Storing and displaying project photos, videos, files and documents;
– Managing snagging records;
– Managing materials lists and RFQs;
– Synchronising authorised information between devices;
– Restoring authorised cloud-backed information;
– Sending service, account and workflow notifications;
– Maintaining security, access controls, ownership controls, integrity
and fraud or abuse prevention;
– Providing support, troubleshooting and service administration;
– Complying with legal obligations;
– Enforcing applicable agreements; and
– Protecting the rights, security and integrity of Keatts, our users
and the Services.
6. LAWFUL BASES FOR PROCESSING
Where UK data-protection law applies, our lawful basis depends on the
purpose and circumstances.
It may include:
Contract – where processing is necessary to provide Services requested
by a user or customer.
Legitimate interests – where processing is necessary for operating,
securing, supporting and improving the Services or enabling legitimate
business administration, provided those interests are not overridden by
individuals’ rights.
Legal obligation – where processing is necessary to comply with
applicable law.
Consent – where consent is the appropriate lawful basis, including for
optional processing where required.
Where a business uses Keatts to process information about its clients,
employees or other individuals, that business is responsible for
determining and documenting its own appropriate lawful basis where it
acts as controller.
7. ROLE-BASED ACCESS
Keatts supports separate Builder, Client and Employee experiences.
Access controls are used to limit users to information associated with
their authorised account, role and relationships.
Businesses are responsible for granting access only to appropriate
individuals and for maintaining accurate account and role information.
8. THIRD-PARTY SERVICE PROVIDERS AND SDKs
Keatts uses third-party technology providers where necessary to provide
the Services.
Supabase is used for services including authentication, database
functionality, cloud storage, synchronisation and backend functionality.
Google Firebase / Firebase Cloud Messaging is used to support push
notifications and related notification functionality.
We may also use infrastructure, hosting, email, website and technical
service providers necessary to operate, secure and maintain the
Services.
These providers may process information on our behalf or as otherwise
described in their applicable terms and privacy documentation.
We assess data handling by third-party components as part of our service
operation and aim to use them only for purposes necessary for Keatts
functionality.
9. SALE AND USE OF PERSONAL INFORMATION
Keatts does not sell personal or sensitive user data.
We do not use personal or sensitive user data for undisclosed
advertising, profiling or unrelated commercial purposes.
If our practices materially change, this Privacy Policy and any required
notices or consent mechanisms will be updated before the new processing
begins.
10. WHEN INFORMATION MAY BE SHARED
Personal information may be disclosed only where reasonably necessary
for legitimate and lawful purposes, including:
– Operating, hosting and securing the Services;
– Authentication, cloud database, storage and synchronisation;
– Sending requested or service-related notifications;
– Providing technical support;
– Making information available to authorised Clients or Employees as
part of the intended role-based functionality;
– Complying with applicable law, court orders or lawful regulatory
requests;
– Protecting the rights, safety and security of users, Keatts or third
parties; or
– Where the relevant user or responsible business has instructed or
authorised the disclosure.
We do not permit service providers to use information for purposes
incompatible with the services they provide to us, subject to their own
lawful obligations.
11. INTERNATIONAL DATA TRANSFERS
Some service providers may process or store information outside the
United Kingdom.
Where UK data-protection law requires safeguards for an international
transfer, we will rely on an appropriate transfer mechanism or other
lawful safeguard.
12. SECURITY
We use technical and organisational measures intended to protect
personal information against unauthorised access, disclosure,
alteration, misuse, loss or destruction.
Keatts uses encrypted network connections, including HTTPS, for
transmission of data between the App and supported backend services.
The App also uses authentication, role-based access, ownership controls
and server-side protections intended to restrict access to authorised
users.
The App includes local-first synchronisation, conflict-management and
recovery mechanisms designed to protect authorised business data against
accidental loss during supported workflows.
No electronic storage or transmission system can be guaranteed to be
completely secure.
Users are responsible for protecting account credentials and maintaining
appropriate security over devices used to access Keatts.
13. DEVICE PERMISSIONS AND USER-SELECTED CONTENT
Keatts requests only device permissions needed for its functionality.
The current Android configuration includes permissions required for
internet connectivity and notifications, together with permissions
contributed by Android or Google components necessary for notification
delivery and network operation.
Keatts does not currently request broad Android permissions to read a
user’s entire photo, video, audio or external-storage library.
Where a user chooses to add a photo, video, receipt, document or other
file, the App may use Android system selection mechanisms or
app-specific storage to access the content selected by that user.
Users can control applicable permissions through their device settings.
Disabling a required permission may prevent the corresponding feature
from working.
14. DATA RETENTION
We retain personal information only for as long as reasonably necessary
for the purposes for which it was collected, including:
– Providing the Services;
– Maintaining appropriate business records;
– Resolving disputes;
– Enforcing agreements;
– Protecting security; and
– Complying with legal obligations.
Different categories of information may be retained for different
periods depending on their purpose, the instructions of the responsible
business and applicable legal requirements.
When an account and associated data are validly deleted, information
covered by that deletion will be removed in accordance with the deletion
process, subject to information that we are legally required or
otherwise lawfully permitted to retain.
Where information must lawfully be retained after a deletion request,
access will be limited and the information will not be retained for
longer than the applicable lawful purpose requires.
15. ACCOUNT AND DATA DELETION
Keatts provides an in-app Delete Account function for eligible account
holders.
Account deletion is intended to permanently delete the relevant account
and associated Keatts data rather than merely disabling or freezing the
account.
For a Builder account, the deletion process is designed to remove the
Builder account and associated cloud data, including relevant database
records, stored files and dependent Client or Employee portal accounts
associated with that Builder where applicable.
ACCOUNT DELETION IS PERMANENT AND CANNOT BE UNDONE.
If you are unable to delete your account through the Keatts app, you may
initiate an account and associated-data deletion request through the
Keatts Account Deletion page:
Delete Your Keatts App Account
Alternatively, you may contact info@keatts.co.uk for assistance with an
account-deletion request.
Where possible, an external deletion request should be made using the
email address registered to the Keatts account and should include:
– The account holder’s full name;
– The email address registered to the Keatts account; and
– The account type, if known, such as Builder, Client or Employee.
To protect accounts and personal information, external deletion requests
require verification that the requester is authorised to act in relation
to the account.
Submitting an external deletion request does not by itself cause an
account or associated data to be deleted.
We may contact the requester using the email address associated with the
Keatts account or request additional information where reasonably
necessary to verify identity and authority to request deletion.
Users should not send passwords, bank details, National Insurance
numbers, passports, driving licences or other sensitive identification
documents unless Keatts specifically requests additional information
after reviewing the request.
Once an authorised deletion request has been verified and processed, the
relevant Keatts account and associated data covered by the deletion
request will be permanently deleted.
Certain information may be retained where required or permitted by
applicable law, including where reasonably necessary for:
– Legal or regulatory obligations;
– Tax or accounting requirements;
– Establishing, exercising or defending legal claims;
– Fraud prevention;
– Security; or
– Abuse prevention.
Where information must lawfully be retained following account deletion,
it will only be retained for the applicable lawful purpose and for no
longer than reasonably necessary or required.
16. YOUR DATA PROTECTION RIGHTS
Depending on applicable law and the circumstances, individuals may have
rights including:
– The right to be informed about how personal information is used;
– The right to request access to personal information;
– The right to request correction of inaccurate or incomplete
information;
– The right to request deletion of personal information;
– The right to request restriction of processing;
– The right to object to certain processing;
– The right to data portability where applicable;
– The right to withdraw consent where processing is based on consent;
and
– Rights relating to certain automated decision-making where
applicable.
These rights are subject to applicable legal conditions and exemptions.
If information about you was entered into Keatts by your employer,
contractor or another business using the Services, that organisation may
be the controller responsible for responding to certain requests.
We may direct you to the relevant organisation where appropriate.
Requests may be sent to info@keatts.co.uk.
We may request reasonable information to verify identity and protect
personal information from unauthorised disclosure.
17. AUTOMATED DECISION-MAKING AND PROFILING
Keatts does not currently use personal information to make decisions
based solely on automated processing, including profiling, that produce
legal or similarly significant effects on individuals.
If this changes materially, this Privacy Policy and any required notices
will be updated before such processing is introduced.
18. CHILDREN
Keatts is a business-management application and is not intended for
children.
The Services are intended for businesses and authorised adult business
users, clients and employees.
We do not knowingly design the Services to solicit personal information
directly from children.
If you believe that a child has provided personal information to Keatts
contrary to this policy, please contact info@keatts.co.uk.
19. PROVIDING PERSONAL INFORMATION
Certain information is required in order to create and maintain an
account or use particular Keatts features.
If required information is not provided, we may be unable to create an
account, authenticate a user, provide a requested feature or deliver the
relevant Service.
Other information is optional and is provided when a user or business
chooses to use the corresponding feature, such as uploading a receipt,
photograph, video or document, or entering additional project or
employee information.
20. COMMUNICATIONS AND NOTIFICATIONS
Keatts may send service-related communications and push notifications
necessary or useful for account operation, workflow events and
authorised Builder, Client or Employee functionality.
Notification delivery may involve Firebase Cloud Messaging and
device-specific notification tokens.
Users can control notification permissions through their device
settings, although disabling notifications may prevent them from
receiving important workflow alerts.
21. LINKS AND THIRD-PARTY SERVICES
The Services may contain links to third-party websites, merchant
websites or external services.
Keatts is not responsible for the privacy practices of third parties
that operate independently from us.
Users should review the privacy information provided by those third
parties before providing personal information to them.
22. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy when the Services, our processing
activities, applicable law or relevant platform requirements change.
The latest version will be published on our website with an updated
“Last updated” date.
Where required, we will provide additional notice or obtain consent
before materially different processing begins.
23. CONTACT US
For questions about this Privacy Policy, personal-information requests,
account or data-deletion enquiries or other privacy concerns, please
contact:
Keatts Group Ltd
15A Wellington Road
Enfield
EN1 2PD
United Kingdom
ICO Registration Reference: ZC156083
Email: info@keatts.co.uk
Website: https://keatts.co.uk/app
24. COMPLAINTS
If you have concerns about how Keatts collects, uses, stores, shares or
protects personal information, please contact us first at
info@keatts.co.uk so that we can investigate and respond.
You also have the right to raise a concern with the Information
Commissioner’s Office (ICO), the UK’s independent data-protection
regulator.
Information about the ICO and how to make a complaint is available from
the ICO’s official website.
