Last updated 24th October 2026
1. Who we are
This service is run by Global Respiratory Safety Ltd (company number [company number], [registered address]). We call ourselves "we" below. We are the controller of the information you give us when you register a mask. You can contact us about your information at privacy@global-respiratory.com.
Your mask maker (the manufacturer or brand on the mask page) does not see your name or any of your details. It only sees counts, such as how many masks from a batch have been registered.
2. What we collect
- When you register a mask: your full name, date of birth, sex, and optionally your company name and company ID (for example an employee number).
- Your records: the fit test certificate you upload (a photo or file) with its test and expiry dates, each filter pack you log, and each maintenance check you complete.
- Staff accounts (HSE, quality and purchasing managers): name, work email address and a password. We store the password in a scrambled form that we cannot read.
- Technical: a cookie that keeps you signed in on your phone (see the cookie notice), and your IP address in security logs.
We do not want medical or health information. We do not ask for it and we do not store it on purpose. A fit test certificate shows a test result for a mask, not your health. If your certificate shows anything about your health, please hide or crop it before you upload it.
3. Why we use it and our legal reason
- To run your account (keep your mask, fit test, filter and check records and show you whether things are in date): this is needed to provide the service you asked for, and you agree to it when you tick the box at registration.
- To share your record with your company's HSE officer: only when you press "Submit info", and only after the officer has approved you. This is your choice and you can stop it by releasing the mask. Your employer may also need these records to meet its own health and safety duties.
- To keep the service safe and working (security logs, preventing misuse, support): this is our legitimate interest in running a secure service.
- To deal with legal claims or meet a legal duty if one arises.
We do not use your information for advertising. We do not sell it. Decisions such as "In date" or "Action needed" are simple date rules, not automated decisions about you.
4. Who can see it
- You, on your own phone.
- Anyone who scans your mask can see the mask details and, once registered, your name and company ID if you gave one. They cannot see your date of birth, sex, fit test certificate or filter history.
- Your company's HSE officer, once you have shared your record and they have approved you. They see your name, company ID, mask, fit test dates and certificate, filter and check records. They do not see your date of birth or sex. Once they have it, your company is responsible for its own copy under data protection law.
- Our staff, only where needed to run or support the service. Their activity is logged.
- Our suppliers, who help us run the service (hosting and email). They may only act on our instructions.
5. Where it is stored
[We store your information in the UK or the European Economic Area.] If we ever move it outside, we will use a lawful safeguard such as the UK international data transfer agreement.
6. How long we keep it
- While a mask is registered to you, we keep its records.
- If you release a mask, we keep its history for [5] years, because employers often have to keep maintenance and examination records for that long. After that we delete it.
- You can ask us to delete your information earlier (see your rights). We may need to keep a minimum record if the law requires it.
- Security logs are kept for [12] months.
7. Your rights
You can ask us to: show you what we hold about you; correct it; delete it; restrict how we use it; give you a copy in a usable format; or stop using it where we rely on our legitimate interests. You can also withdraw your agreement at any time. To do any of this, email privacy@global-respiratory.com. We will reply within one month. There is no charge in most cases.
If you are unhappy with how we use your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Children
This service is for working adults. It is not meant for anyone under 16.
9. Changes
If we change this notice in a way that matters, we will update the date above and tell registered users where we can.