Privacy Notice

Varn ("Varn", "we", "us") is the seller's legal business name and the trading name under which we operate the Varn fire safety reporting platform. We are the data controller for the personal data described in this notice. You can contact us via our contact page.

• Account data — name, email address, login credentials and profile details (including professional credentials and certificates you upload), used to create and manage your account and provide the service.
• Report content — assessment data, findings, notes, photos and logos you enter, used to produce and store your reports.
• Support messages — messages you send us, used to respond to and manage your enquiries.
• Usage and device data — IP address, device identifiers and usage telemetry, used for security, fraud prevention and product improvement.

Payment card and billing data is collected directly by Paddle (our Merchant of Record) and is not stored by us.

We process account data and report content to perform our contract with you. We process usage, device and security data under our legitimate interests in keeping the service secure and improving it. Where required, we rely on your consent, and we process certain data to comply with legal obligations.

• Service providers — hosting, database, analytics and support tooling providers who process data on our behalf.
• Paddle — our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law.

Some of our service providers process data outside the UK/EEA. Where this happens, we use appropriate safeguards such as standard contractual clauses or adequacy decisions.

We keep personal data for as long as your account is active and as needed to provide the service. When data is no longer needed, it is deleted or anonymised, except where we must retain it to meet legal obligations.

Under UK/EU data protection law you have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to complain to your supervisory authority (in the UK, the ICO). We respond to requests within one month.

We apply appropriate technical and organisational measures, including encryption in transit and access controls, to protect your personal data.

We use essential cookies and browser storage to keep you signed in and operate the service. Where we use analytics or marketing cookies, you can manage your preferences through your browser settings.