Privacy Policy

This policy explains what personal data See-Curity collects, why, how long we keep it, who else receives it, and the rights you have. It covers this website and the See-Curity GPS tracking platform at dev.see-curity.net.

1. Who we are

See-Curity is run by Justyna Biernat, London NW7 2PE, United Kingdom (“See-Curity”, “we”, “us”). For any privacy question or request, please use our privacy request form. We answer within one month.

2. Two different roles

We decide (we are the “controller”) for the data of visitors to this website, people who send us an enquiry or a partner application, and the user accounts of our customers.

We act for our customers (we are their “processor”) for the tracking data of their vehicles. A company that fits a See-Curity tracker to its vehicles decides which vehicles are tracked and why; it is the controller of that data, including data about the people who drive those vehicles. We process it only on that customer's instructions, under our Data Processing Agreement. If you drive a vehicle tracked by one of our customers, please contact that company first; you may also use our form and we will pass your request on and help them answer it.

3. What we collect, why, and on what legal basis

Data	Why	Legal basis
Website visit: IP address, browser type, the pages requested	To deliver the pages, keep the site secure and fix faults	Legitimate interests
Your country, worked out from your IP address on our own server (no outside service is asked)	To show the site in your language	Legitimate interests
Enquiries and partner applications: name, e-mail, phone, company, country, your message, plus your IP address and browser	To answer you and, if you wish, prepare an offer; the IP address only to detect abuse	Steps before a contract, and legitimate interests
Questions typed to the website assistant	To answer your question (see section 5)	Legitimate interests
User accounts: name, user name, e-mail, company, role, password (stored only as a one-way hash), language	To provide the platform and keep it secure	Contract
Acceptance records: who accepted which version of our Terms and Data Processing Agreement, when, and from which IP address	To prove what was agreed	Legitimate interests and legal obligations
Vehicle tracking data (we act for the customer): location from GPS or the mobile network, speed, direction, ignition, battery voltage, alarms, trips and visits to places, geofences, commands sent to the tracker, vehicle details, and the phone numbers and e-mail addresses that receive alerts	To provide the tracking service the customer has ordered: live map, history, reports and alerts	Processed for the customer, on the customer's legal basis
Privacy requests sent through our form	To answer them and keep a record that we did	Legal obligation

We do not sell personal data, we do not use it for advertising, and we do not make decisions about anyone by automated means alone.

4. How long we keep it

• Tracking history (positions, alarms, trips and visits, commands, alert message logs): up to 12 months. Anything older is deleted automatically every night.
• Enquiries, partner applications and privacy requests: 2 years. The IP address and browser details stored with them are removed after 90 days.
• User accounts and vehicle settings: for as long as the customer uses the service. When an account or vehicle is deleted, its data is deleted with it.
• Acceptance records: for as long as the account exists and up to 6 years after it is closed, the period in which a contract claim can be made.
• Web server logs: a short period for security and troubleshooting, after which the server deletes them automatically.

5. Who else receives data

We use a small number of service providers. Each receives only what it needs to do its job:

Provider	What for	Where
Dedicloud (dedicloud.co.uk)	The server the platform runs on, and its database	United Kingdom
OpenAI	The AI assistants. What you type to an assistant is sent to OpenAI to write the answer; for signed-in users, so are the vehicle details needed to answer. OpenAI does not use this data to train its models and deletes it after at most 30 days.	USA
Google (Google Maps)	Map and satellite images on the platform's maps, and the “open in Google Maps” links. Your browser fetches the images directly, so Google receives your IP address.	USA
Esri (ArcGIS)	Alternative map images on the platform's maps, fetched directly by your browser	USA
OpenStreetMap Foundation	Map images on the demonstration screens of the partner page, fetched directly by your browser	United Kingdom / EU
WhatsApp (Meta)	Delivering alert messages to the phone numbers a customer has entered	EU / USA
Google (Gmail)	The mailbox where we receive enquiries and privacy requests	EU / USA
Mobile network operators	Carrying data from the tracker in the vehicle to our server	Depends on the SIM card

We may also disclose data where the law requires it, for example to the police with a valid legal request.

6. Transfers outside the UK and EU

Some providers above are in the USA. Where data leaves the UK or the European Economic Area, it is protected by an adequacy decision (such as the UK–US data bridge or the EU–US Data Privacy Framework, where the provider is certified) or by standard contractual clauses approved by the UK and EU authorities.

7. How we protect data

All connections are encrypted (HTTPS). Passwords are stored only as one-way hashes. Each customer company sees only its own vehicles, and each user only what their role allows. The live map signs a user out automatically after a period of inactivity. Access to the server is limited to the people who run the platform.

8. Your rights

You have the right to:

• get a copy of the personal data we hold about you;
• have wrong data corrected;
• have your data deleted;
• restrict or object to how your data is used;
• receive your data in a machine-readable file to take elsewhere;
• withdraw any consent you have given, at any time.

Use our privacy request form. We may ask you to confirm who you are before we send any personal data. We answer within one month.

You can also complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority in the country where you live or work. We would appreciate the chance to put things right first.

9. Cookies

We use only the cookies the site needs to work. See our Cookie Policy.

10. Children

The platform is a business service and is not meant for anyone under 16.

11. Changes to this policy

When this policy changes, we update the date at the top. If a change is significant, we tell signed-in users when they next sign in.