Privacy policy

Blaze Squad Ltd · last updated 2 September 2026

This policy covers this website and the Blaze Squad Ltd apps: Fire Suite Pro (the assessor's suite) and Fire Passport (the Responsible Person's companion app). Blaze Squad Ltd operates the cloud services described below; who is responsible for what is set out under “Your rights”.

This website

This site is a static information site. It sets no cookies, runs no analytics and collects no personal data. If you email us, we hold your correspondence to answer it.

Fire Suite Pro (assessor app)

• Signing in. Assessors sign in with an email one-time code or a passkey. We hold the account email address, organisation membership and passkey public keys — never a password.
• Assessment data is stored in our cloud and on the device. While an assessor is signed in, buildings, assessments, findings, photographs, floor plans, signatures and published reports are synchronised over an encrypted connection to our cloud database and file store, where they are shared with the other devices and members of the assessor's organisation. The device keeps a working copy so assessments continue offline. Signed out, data stays on the device only.
• Held whether or not the building uses Fire Passport. An assessment is stored in our cloud because the assessor is signed in, not because the building has any relationship with us. Where the building's Responsible Person has never used Fire Passport, and where its owner or manager holds no account with us at all, the assessment, its findings, photographs and signatures are still held under the assessor's organisation. Referring an assessment to a Fire Passport record is a separate, deliberate act that changes who can see it; it does not change whether it is stored.
• People named or shown in an assessment. An assessment may record the names and contact details of responsible persons, managing agents, contractors and occupants, and photographs taken in and around a building may show people or their property. The assessor or firm carrying out the assessment decides what is recorded and is the controller for it; we hold it on their behalf. Requests about that content are directed to them — see “Your rights”.
• How long assessment data is kept. Each published report and the data behind it is held for a set period from the date it was published, after which it is deleted:

  Report	Held for	Where the building is on Fire Passport
  Fire risk assessment	15 months	30 months
  Fire door survey	15 months	30 months
  Staircase survey	63 months	126 months
  Any other published report	15 months	30 months

  The periods double where the assessment was instructed through, or returned to, a Fire Passport building record, because the record is then part of a building's continuing history rather than a single engagement.
• Work that is never published. An assessment that is never published is held for a maximum of twelve months from the last time it was worked on, then deleted. Nothing unpublished is kept indefinitely.
• You are warned before anything is deleted. We notify the assessor's organisation ahead of a deletion date so that anything wanted for their own records can be downloaded first. The report remains the assessor's to keep; what expires is our copy of it.
• Renewing a report does not extend the one it replaces. When a report is renewed, the new version is held for its own full period from its own publication date. The version it supersedes keeps the period it already had and is deleted when that expires, under the same rules. Renewal therefore keeps the current assessment available; it does not preserve the whole history indefinitely.
• What deletion does not reach. Two things survive. The record that a publication took place — its reference, time and charge — is kept for billing integrity. And any copy already delivered elsewhere, such as a report emailed to a client or an assessment sent into a Fire Passport record, has left our control and cannot be recalled by deleting ours. An assessor or firm may also ask us to remove their hosted data earlier, on verified request.
• Hosted questionnaire forms. Where an assessor sends a building manager a hosted pre-inspection questionnaire, the answers submitted are transmitted over an encrypted connection through our cloud infrastructure to the assessor's app and are used only to populate that assessment.
• Publishing and sending reports. When a report is published, a record of the publication (reference, time and charge) is kept for billing integrity, and the published report is stored with the organisation's assessment data. Where the assessor emails a report to a client from the app, the email is sent through our infrastructure and a record of the send is kept.

Fire Passport (Responsible Person app)

• Signing in. Responsible Persons sign in with an email one-time code or a passkey, with one-time recovery codes for account recovery. We hold the account email address, organisation membership and passkey public keys — never a password.
• Building records are stored in our cloud. Signed out, building records save only on your device. Once you sign in, your records — including any personal emergency evacuation plan details you enter — are stored in our cloud database under your organisation, so your portfolio follows you across devices and is shared with colleagues in the same organisation. Records already on the device are copied to your account when you first sign in.
• Sending records and notices. Records and fire-safety notices sent from the app are delivered through our cloud infrastructure, and a delivery record is kept — including when the recipient first views and acknowledges it — so both sides hold an audit trail. A few actions (such as handover invitations) instead open a pre-addressed email in your own mail app.
• Invites. An assessor's invite contains the building reference and the assessor's contact details, used to route your record to them. Organisation invites carry the invitee's email address and role.
• Tender documents are deleted after three months. Returns to a tender are held sealed until the return date, then released simultaneously and sent to the issuer, the Responsible Person and anyone else listed on the tender, with every document in one zip file. A competing tenderer never receives another tenderer's return. The uploaded documents — specifications, priced bills, method statements, certificates — stay on our servers for three months from the release date, and the release email states that date. After it, those files are deleted and the record of the deletion is kept. The tender record itself — who was invited, who returned, what they bid and who won — is retained in the Management Log as the Responsible Person's evidence that a proper procurement took place.

How data is hosted

Our cloud database and file store are operated for us by Supabase; this website is served by Cloudflare. Data is encrypted in transit. Hosted data is kept while the account or organisation it belongs to remains active, and removed on verified request (see “Your rights”).

What we do not do

• No sale or sharing of personal data with third parties for marketing.
• No advertising, profiling or cross-app tracking in any Blaze Squad app.

Your rights

Under UK GDPR you may request access to, correction of, or deletion of personal data, and you may complain to the Information Commissioner's Office (ico.org.uk). For the content of a fire risk assessment, the assessor or firm that carried it out is the controller, and Blaze Squad Ltd hosts that content as their processor. For a Fire Passport building record (including any evacuation plan details), the Responsible Person or their organisation is the controller, and we host it as their processor. Blaze Squad Ltd is the controller for accounts, billing and publication records, and for this website. Requests concerning the content of an assessment should be directed to the assessor who carried it out; requests about anything else — including deletion of hosted data — come to us at the address below.

Contact

Blaze Squad Ltd, Cypress Lodge, Station Road, Potter Heigham, Great Yarmouth, England, NR29 5HX.
Email: mb@blazesquad.co.uk

Changes

We will post any changes to this policy on this page with an updated date above.