Privacy Policy

For US visitors, customers, and Users only; UK and rest-of-world users are covered by our separate Privacy Notice.

1. Who We Are

The Sentry Devices Ltd (“we,” “us,” “our”) is a company registered in England and Wales, of 173 King Street, Ramsgate, Kent, CT11 8PN, United Kingdom.

We wear two different roles depending on the data in question, and it matters which one applies to you:

• We are the Business, or Controller, for account and billing data connected to a Business Customer's subscription (see section 3.1), and for data collected through our marketing website.
• We are only a Service Provider, or Processor, for the operational data your workers generate by using the Sentry app (see section 3.2). Your employer (the Business Customer that holds your license) determines how that data is used, not us, and this Policy does not set out their privacy practices. Ask your employer for their own privacy notice covering your use of the app.

This Policy explains what personal information we collect, why, and what rights you have, whether you're visiting our website, using the Sentry app as a worker, or managing a Business Customer account as an Administrator.

2. The Sentry App and Portal

The Sentry app and business administration portal are hosted on our behalf by a UK-based hosting provider, under a written contract. Our hosting provider stores this data securely but does not decide how or why it's used. Because our hosting provider and our own systems are located in the United Kingdom, personal information collected from US Users is transferred to, and stored in, the United Kingdom.

Once a Business Customer's Administrator sets up their account and staff begin using the app, we do not have access to the operational data staff generate: check-ins, location sharing, alarms and alerts, and incident reports. That data is only accessible by the Business Customer, who is responsible for it under their own privacy practices. Panic alarm video sits apart even from that: it is not visible to the Business Customer's Administrators either, only to the individual worker who recorded it, unless that worker chooses to share it further themselves (see section 3.2).

3. Personal Information We Collect

3.1 Information we control ourselves

Website visitors and inquiries: name, email address, phone number, the content of your inquiry, and technical/browsing information collected automatically (see Cookies, below).

Business Customer accounts: the company name, the name and email address of the Administrator who set up the account, the number of app licenses purchased, the number of Users, the number of active licenses, licenses remaining, and any promotional codes used.

Billing: payment and billing information processed via our payment processor, and any business name and address you give us so we can send you invoices and receipts.

3.2 Information we process only on behalf of a Business Customer

This data is generated by workers using the app once their employer has set up an account. We store it, but only the Business Customer can access or make decisions about it, with one exception for panic alarm video, described below. We're a Service Provider or Processor here, not a Business or Controller. It includes:

• check-in times and status;
• location data shared through the app;
• alarms and alerts, and any nominated personal contacts (friends or family) a worker adds to receive them;
• incident reports submitted through the app;
• audio and video automatically recorded when a panic alarm is activated. This is stored on the worker's own device and, for 30 days, on our hosting provider's servers, so the worker can access it by an automatically emailed link if their phone is lost or no longer available to them. This is only accessible to the worker who recorded it, not to their employer's Administrators through the portal, unless the worker chooses to share it themselves. See section 9 for when the 30-day period may be extended;
• data belonging to friends or family (aged 13 or over) given a free additional license by a User: we have no visibility of this at all beyond knowing a license has been allocated; the User who allocated it is responsible for it.

Stopping an active alarm, and the recording that goes with it, requires the worker to authenticate using their device's own built-in biometric unlock feature, such as Face ID, Touch ID, or an equivalent Android biometric method. This authentication takes place entirely on the worker's device through the device's operating system. We do not receive, collect, store, or have access to any facial image, fingerprint, or other biometric identifier; we only receive confirmation that the device's own authentication succeeded.

Under California and similar state law, our collection, storage, and hosting of this data on a Business Customer's behalf is “processing” even though we never access, view, or use it ourselves.

4. How We Use Personal Information We Control

This section covers the data described in section 3.1 only. Data described in section 3.2 is used as instructed by the relevant Business Customer. Ask your employer's Administrator if you want to know how they use it.

We collect this information directly from you, automatically through your use of our website, and from our payment processor and other service providers described in section 6.

5. We Do Not Sell or Share Your Personal Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act and similar state laws. We do not need a “Do Not Sell or Share My Personal Information” link because we do not engage in either activity.

6. Who We Share Information With

We work with a small number of carefully selected service providers who act on our instructions and are contractually required to protect your information. We describe them by category below rather than by name, as we're not legally required to name them individually, only to describe the categories of recipient and their general location:

We may also disclose personal information where required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets, subject to the same protections described in this Policy.

7. Cookies and Analytics

Our website uses cookies to improve your experience and understand how visitors use our site. On your first visit, our cookie banner asks for your permission before any optional cookies are set. You can accept or decline at any time using the Cookie Settings link in the footer.

We use a third-party website analytics tool to collect anonymized data about how visitors interact with our website, including pages visited, time on site, and general geographic region. We do not use this for advertising or remarketing. Analytics cookies are optional and only activated with your consent where required. Strictly necessary cookies are set without consent because they're required for the website to function, and no personal information is stored through them.

8. Your State Privacy Rights

If you are a resident of a state that provides consumer privacy rights, such as California, Virginia, Colorado, Connecticut, Utah, or another state with a comparable law, you generally have the right to:

• know and access the categories and specific pieces of personal information we hold about you;
• correct inaccurate personal information;
• delete personal information we hold about you, subject to certain exceptions;
• obtain a portable copy of the personal information you've provided to us;
• opt out of the sale or sharing of your personal information, and of profiling that produces legal or similarly significant effects (we do not currently engage in either);
• not be discriminated against for exercising any of these rights.

This section applies to the data we control ourselves (section 3.1). If you're a worker and want to exercise a right over your check-in, location, alert, incident report, or panic alarm audio/video data, that request should go to your employer, as they determine how that data is used. We'll help them fulfill it where we're able to as their Service Provider or Processor.

We do not collect biometric information, as defined under California and similar state law. The Service uses your device's own built-in biometric authentication (see section 3.2) to confirm identity before stopping an alarm, but we never receive or process the underlying biometric data ourselves.

To exercise a right, email [email protected]. We will verify your request using information reasonably necessary to confirm your identity before acting on it. You may also designate an authorized agent to make a request on your behalf; we may ask for written proof of that authorization. We will not charge a fee for a reasonable number of requests, and we will respond within the time required by applicable law.

9. Data Retention

Data we control (section 3.1): we keep it for as long as necessary to administer the subscription and for a reasonable period afterward to meet our contractual and legal obligations, such as tax record-keeping.

Data we process on a Business Customer's or User's behalf (section 3.2): panic alarm audio/video is kept on our hosting provider's servers for 30 days as standard. If law enforcement or another authority formally asks us to preserve a specific recording for longer, for example as part of an investigation, we may instruct our hosting provider to retain it beyond 30 days, and will tell the relevant Business Customer or account holder where we're able to. We still do not access the recording ourselves. Other operational data is retained in line with the Business Customer's own instructions and retention schedule. Ask your employer if you want to know how long they keep it.

10. Security

We use appropriate technical and organizational measures to protect your information against unauthorized access, loss, or disclosure, including encryption in transit, access controls, and contractual security requirements for our service providers.

11. Children's Privacy (COPPA)

The Sentry is built for business use, and we expect most Users to be adults. Children may come to use the app in two ways:

• As a worker aged 16 or over, added by a Business Customer in an industry where that's a genuine, lawful working relationship (for example, event staffing).
• As a friend or family member aged 13 or over given one of a User's free additional licenses (see section 3.2). We do not permit US Users to allocate a license to anyone under 13, and by allocating a license, the User represents that the recipient meets this requirement.

We do not knowingly collect personal information from children under 13, and we rely on the representation described above without independently verifying it. If we become aware that we have collected personal information from a child under 13 without the verifiable parental consent the Children's Online Privacy Protection Act (COPPA) requires, we will delete it promptly. A parent or guardian who believes we may hold information about their child under 13 can email [email protected] to request that we review and delete it.

12. International Transfers

As described in section 2, personal information from US Users is transferred to and stored in the United Kingdom. We maintain appropriate contractual and security safeguards with our hosting provider for this transfer.

13. Changes to This Policy

We update this Policy from time to time in response to changes in the law, our processing practices, or the services we offer. When we make changes, we update the date at the top of this document.

14. Contact Us

For anything privacy related, email [email protected]. For general inquiries, email [email protected] or visit thesentry.co.uk.

The Sentry Devices Ltd, 173 King Street, Ramsgate, Kent, CT11 8PN, United Kingdom.