LevelUp Privacy Policy
Effective date: 2 July 2026
This Privacy Policy explains how COZQ Limited collects, uses, stores and protects personal data when you use LevelUp, including the LevelUp website, web platform, mobile applications, customer portals, staff portals, integrations and related services.
1. Who We Are
LevelUp is a software product developed, owned and operated by COZQ Limited.
COZQ Limited is a company incorporated and registered in England and Wales with company number 16592649.
20 Wenlock Road
London
England
N1 7GU
Trading Name: LevelUp
VAT Registration Number: GB519163195
ICO Registration Number: ZC022310
Email: privacy@cozq.com
Website: https://levelup.cozq.com
Where LevelUp is provided to a business customer, that customer is usually the data controller for personal data relating to its staff, customers, suppliers and business operations. COZQ Limited usually acts as a data processor on behalf of that customer.
Where COZQ Limited collects information for its own business purposes, such as security, support, billing, compliance, service improvement or account administration, COZQ Limited may act as a data controller.
2. Scope of This Policy
This policy applies to:
- The LevelUp website;
- The LevelUp web platform;
- The LevelUp iOS application;
- The LevelUp Android application;
- Customer portals, staff portals and admin areas;
- LevelUp APIs, integrations, notifications and related services;
- Support, onboarding and account management relating to LevelUp.
This policy does not replace any separate contract, data processing agreement, software licence agreement or service agreement between COZQ Limited and a business customer.
3. Information We Collect
The personal data collected depends on how LevelUp is used, your role, your organisation’s configuration and the permissions you grant. This may include:
Account and Identity Information
- Name;
- Email address;
- Phone number;
- Job title or role;
- Organisation name;
- Business ID or tenant identifier;
- Login credentials, authentication tokens and session information.
Business and Operational Information
- Customer records;
- Job, project and appointment information;
- Quotes, proposals, contracts and documents;
- Diary, rota and scheduling information;
- Staff assignments and activity;
- Vehicle, fleet and van check records;
- Audit logs and workflow history;
- Messages, notes, comments and internal communications.
Device and Technical Information
- Device type, model and operating system;
- App version and browser information;
- IP address;
- Approximate location derived from IP address;
- Crash logs, diagnostics and performance data;
- Security logs and access history.
Files, Images and Media
- Photos captured or uploaded through LevelUp;
- Documents, contracts, reports and forms;
- Signatures and signed records;
- Attachments related to jobs, customers, vehicles, staff or business records.
Location Information
LevelUp may collect location data where enabled by your organisation and permitted by your device settings. This may include foreground location and, where specifically enabled, background location.
Location data may be used for:
- Live staff location features;
- Job attendance verification;
- Route planning and workforce coordination;
- Lone worker safety;
- Job dispatch and allocation;
- Vehicle, field staff or appointment management;
- Operational audit and compliance records.
Location tracking is only active where configured by your organisation and permitted by your device settings. You can control app location permissions at any time through your device settings.
4. App Permissions
The LevelUp mobile applications may request access to certain device features to provide core functionality.
| Permission | Purpose |
|---|---|
| Camera | To capture job photos, document images, vehicle checks, profile images, evidence, signatures and other work-related media. |
| Photos / Media Library | To allow users to upload existing images, documents or media to LevelUp. |
| Files / Documents | To upload or attach documents, contracts, certificates, reports and other business files. |
| Location - Foreground | To support job attendance, route planning, field-service operations and lone worker safety while the app is in use. |
| Location - Background | To support authorised features such as live staff location, attendance verification, job dispatch and operational visibility, only where enabled by your organisation and permitted by you. |
| Notifications | To send job alerts, appointment reminders, messages, workflow updates, system alerts and other service notifications. |
| Face ID / Touch ID / Biometrics | To allow secure local authentication on supported devices. |
LevelUp does not receive or store your Face ID, Touch ID, fingerprint or biometric template data. Biometric authentication is handled by your device operating system. LevelUp only receives confirmation that authentication was successful.
5. How We Use Personal Data
We use personal data to:
- Provide, operate and maintain LevelUp;
- Create and manage user accounts;
- Authenticate users and secure access;
- Deliver job management, scheduling, CRM, proposal, contract, fleet and workflow features;
- Enable customer portals, staff portals and mobile app functionality;
- Send notifications, reminders and service messages;
- Provide support, onboarding and troubleshooting;
- Maintain audit logs, compliance records and security records;
- Detect, prevent and investigate misuse, fraud, unauthorised access or technical issues;
- Improve the performance, reliability and usability of LevelUp;
- Comply with legal, tax, accounting and regulatory obligations.
6. Legal Basis for Processing
Where COZQ Limited acts as a data controller, we rely on one or more of the following legal bases under UK GDPR:
- Contract: to provide LevelUp and related services;
- Legitimate interests: to operate, secure, improve and support our services;
- Legal obligation: to comply with applicable laws and regulatory requirements;
- Consent: where required, such as certain optional communications or device permissions.
Where COZQ Limited acts as a processor, we process personal data on the documented instructions of the relevant business customer.
7. Business Customer Data
Many LevelUp users access the platform through their employer or another organisation. In those cases, the organisation controls how LevelUp is configured and how business data is used.
Your organisation may control settings such as user roles, permissions, location tracking, job visibility, customer records, uploaded documents, staff records, retention periods and integrations.
If you are using LevelUp through your employer or another organisation, you should also refer to that organisation’s own privacy notices, employment policies and internal procedures.
8. Sharing Personal Data
COZQ Limited does not sell personal data. We may share personal data where necessary with:
- Business customers who administer their LevelUp workspace;
- Authorised users within the relevant organisation;
- Hosting, infrastructure and security providers;
- Email, SMS and push notification providers;
- Payment processors where payment features are used;
- Accounting, CRM, calendar, document signing or productivity integrations where enabled;
- Professional advisers, insurers or legal representatives;
- Regulators, law enforcement or public authorities where legally required.
Depending on the features enabled by your organisation, LevelUp may integrate with or use services such as Apple, Google, Firebase, Microsoft, Stripe, QuickBooks, Cloudflare, email providers, SMS providers and hosting providers.
Integrations are optional and depend on each customer’s configuration.
9. What We Do Not Do
- We do not sell personal data;
- We do not use customer-controlled data for behavioural advertising;
- We do not build advertising profiles from customer data;
- We do not use customer data to train public AI models unless expressly agreed or clearly disclosed.
10. International Transfers
We aim to use UK or appropriate secure infrastructure where possible. Some third-party services may process data outside the United Kingdom or European Economic Area.
Where international transfers occur, we use appropriate safeguards such as adequacy regulations, contractual protections, standard contractual clauses or equivalent lawful transfer mechanisms.
11. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy, including to provide LevelUp, comply with legal obligations, resolve disputes, enforce agreements, maintain security and support business continuity.
Retention periods may vary depending on the type of data, customer configuration, legal obligations and contractual requirements.
Where COZQ Limited acts as a processor, deletion or retention of customer-controlled data is normally managed in accordance with the relevant customer agreement or data processing agreement.
12. Account and Data Deletion
Users may request deletion of their account or personal data by contacting their organisation’s LevelUp administrator or by contacting COZQ Limited at privacy@cozq.com.
Where your organisation is the data controller, COZQ Limited may need to refer the request to that organisation.
Business customers may request deletion or export of customer-controlled data in accordance with their service agreement, software licence agreement or data processing agreement.
13. Security
We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include:
- Encrypted connections using TLS;
- Role-based access controls;
- User permissions and access restrictions;
- Authentication and session management;
- Audit logs and activity monitoring;
- Secure hosting controls;
- Regular backups;
- Disaster recovery measures;
- Principle of least privilege access;
- Security reviews and vulnerability management.
No system can be guaranteed to be completely secure, but we take security seriously and work to protect LevelUp and its users.
14. AI-Powered Features
LevelUp may include AI-powered features such as summaries, drafting assistance, workflow recommendations, document analysis, customer communication support or business insights.
Where AI features are used, information submitted to those features may be processed to generate the requested output. AI-generated content should be reviewed by users before being relied upon for operational, legal, financial, employment or customer-facing decisions.
COZQ Limited does not use customer data to train public AI models unless this is expressly agreed or clearly disclosed.
15. Children’s Privacy
LevelUp is designed for business and organisational use. It is not intended for direct use by children.
Where business customers choose to store information relating to children or vulnerable individuals, they are responsible for ensuring they have an appropriate lawful basis and comply with applicable safeguarding and data protection legislation.
16. Your Rights
Depending on your circumstances and applicable law, you may have rights to:
- Access your personal data;
- Correct inaccurate personal data;
- Request deletion of personal data;
- Restrict processing;
- Object to processing;
- Request data portability;
- Withdraw consent where processing is based on consent;
- Complain to the UK Information Commissioner’s Office.
If you use LevelUp through your employer or another organisation, COZQ Limited may need to refer your request to that organisation where they are the data controller.
17. App Store and Google Play Privacy Information
This Privacy Policy is intended to support the privacy policy requirements of the Apple App Store and Google Play Store.
The privacy information shown on the Apple App Store or Google Play Store is intended to summarise the types of data the LevelUp app may collect or process.
The actual data collected may depend on your organisation’s configuration, your device permissions, your role, your device settings and the features you use.
18. Cookies and Similar Technologies
The LevelUp website and web platform may use cookies or similar technologies to keep users signed in, maintain security, remember preferences, measure performance and provide core functionality.
Some cookies are essential for the service to work. Where required, non-essential cookies will only be used with appropriate consent.
19. Data Protection and Complaints
COZQ Limited is registered with the UK Information Commissioner’s Office under ICO registration number ZC022310.
If you have any questions regarding this Privacy Policy or how your personal information is processed, please contact:
COZQ Limited Privacy Team
Email: privacy@cozq.com
If you believe your personal data has not been handled in accordance with applicable data protection laws, you have the right to lodge a complaint with the UK Information Commissioner’s Office.
ICO website: https://ico.org.uk/make-a-complaint/
20. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to LevelUp, legal requirements, security practices or business operations.
When we make material changes, we will take reasonable steps to notify users or business customers, such as by updating the effective date, displaying an in-app notice or contacting account administrators.
21. Contact Us
COZQ Limited
Trading as LevelUp
Company Number: 16592649
VAT Registration Number: GB519163195
ICO Registration Number: ZC022310
Registered Office: 20 Wenlock Road, London, England, N1 7GU
Email: privacy@cozq.com
Website: https://levelup.cozq.com