Privacy Policy
Last updated: August 2026
Introduction
Turtle Bale Limited, a company registered in England and Wales and trading as R-10 Fire Safety Solutions ("we", "our", "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our fire door inspection certificate services.
Who is the data controller
Turtle Bale Limited is the data controller for the personal data described in this policy and is responsible for deciding how and why it is processed. Our payment reseller Paddle.com acts as Merchant of Record and is a separate controller of the payment and billing data it collects at checkout.
Information We Collect
Personal Information
- Name and contact details
- Property address and details
- Email address and phone number
- Account login credentials
- Support messages and correspondence
- Usage data, device identifiers and IP address
- Order and receipt records (transaction reference, amount, date). Card and billing details are collected and processed by Paddle.com, not by us — we never see or store your full card details.
Inspection Data
- Fire door inspection photographs
- Property compliance information
- Inspection reports and certificates
How We Use Your Information and Legal Basis
- Provide inspection services, generate certificates and manage your account — performance of a contract
- Fulfil orders and keep receipt records — performance of a contract and legal obligation
- Communicate with you about your inspections and provide support — performance of a contract
- Security, fraud prevention and service improvement — legitimate interests
- Marketing emails, where sent — consent, withdrawable at any time
- Retention of inspection records and tax records — compliance with legal obligations
Who We Share Your Information With
- Paddle.com — our online reseller and Merchant of Record for all orders, which handles checkout, payment processing, subscription and order management, tax compliance, invoicing, refunds and related customer service. See Paddle's Privacy Notice.
- Service providers and subprocessors — hosting, database, email delivery, analytics and support tooling, acting on our instructions.
- Verification specialists — qualified inspectors who review your submitted inspection evidence.
- Professional advisers — legal and accounting advisers where necessary.
- Authorities — where required by law or to protect our legal rights.
International Transfers
Some of our providers process data outside the UK or EEA. Where that happens we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.
Data Security
We implement appropriate technical and organisational measures — including encryption in transit, access controls and row-level data isolation — to protect your personal information against unauthorised access, alteration, disclosure or destruction. Payment card data is handled entirely within Paddle's PCI-compliant environment.
Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Inspection records and certificates are typically kept for 7 years in accordance with fire safety and accounting requirements, after which they are deleted or anonymised.
Cookies
We use essential cookies to keep you signed in and secure the service, and limited analytics cookies to understand usage. You can manage or block cookies in your browser settings. See our Cookie Policy for details.
Your Rights
Under the UK GDPR and Data Protection Act 2018, you have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your data
- Restrict processing
- Object to processing, including to legitimate interests
- Data portability
- Withdraw consent at any time
- Complain to the Information Commissioner's Office (ico.org.uk)
We respond to rights requests within one month.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact Turtle Bale Limited at privacy@r-10.co.uk.