Information stored
ServeASAP stores account details such as names, organisation details, email addresses, telephone numbers, password hashes, account status and profile preferences. Matter records may contain recipient details, service addresses, deadlines, instructions, case information and attendance records.
Matter documents
Matter documents are stored in configured private application storage and are made available through authenticated matter-level access controls. File metadata may include the original and stored filenames, detected type, size, category, uploader, checksum and storage state. Relevant access and download events may be recorded for security and audit purposes.
Sessions and security
Session identifiers, CSRF tokens, sign-in state and security or audit events are processed to operate and protect the service. Technical errors may be logged where necessary to diagnose faults and maintain platform security.
Postcode and coordinate processing
Postcode verification may send entered UK postcodes to an external postcode-data service and store returned location information and the verification time. Where attendance coordinates are recorded, they may be supplied by the user’s browser with permission or entered manually. Such coordinates should not be treated as independently verified device-location evidence unless expressly stated otherwise.
Retention and deletion
Matter records, service records, proof documents, payment records and associated audit information are retained for up to six years after the matter is completed, unless a longer period is required by law, regulation, a dispute or another legitimate legal requirement. Temporary and staged files are removed when they are no longer required for operation of the service. At the end of the applicable retention period, information will be securely deleted or anonymised where appropriate.
Privacy questions
Questions about privacy, personal data or the exercise of data-protection rights can be sent to admin@serveasap.co.uk.