This document is a draft prepared for review by qualified legal counsel. It has not been legally approved and does not constitute legal advice. Data processing purposes, lawful bases, retention periods, international transfer details, and company identity must be verified and completed by your solicitor before publication. Do not publish or rely on this draft as a compliant privacy notice.
GuardianHub ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
We collect information you provide directly to us, including account registration details, contact information, and usage data. We also collect data generated through your use of the platform, such as patrol logs, incident reports, and system analytics.
We use your information to provide and improve our services, communicate with you, ensure security and compliance, and comply with legal obligations. We process personal data in accordance with UK GDPR and Data Protection Act 2018.
We implement industry-standard security measures including encryption at rest and in transit, access controls, regular security assessments, and disaster recovery procedures. Our infrastructure is hosted on Supabase, which provides database encryption by default. All client data is logically separated through row-level security at the database layer. For further details on our security practices, please refer to our Security page.
We retain your data for as long as your account is active or as needed to provide services. Upon account closure, we retain anonymised data for analytics and delete personal data within 90 days unless legal obligations require longer retention.
Under UK GDPR, you have the right to access, rectify, erase, restrict processing, object to processing, and request data portability. To exercise these rights, contact us at privacy@guardianhub.com.
For privacy-related questions, contact our Data Protection Officer at privacy@guardianhub.com or write to: 12th Floor, The Shard, London Bridge Street, London SE1 9SG.
Our hosting infrastructure is provided by Supabase, whose servers are located within the European Economic Area or countries recognised as providing adequate data protection. Where transfers to third countries occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses. This section must be verified against actual hosting arrangements before publication.
We engage certain third-party service providers to deliver our platform. A current list of subprocessors is maintained and available upon request. We enter into data processing agreements with all subprocessors. This section should be replaced with a link to the live subprocessor list once established.
Our platform uses essential cookies required for authentication and session management. Optional analytics and marketing cookies are only deployed with your explicit consent, which can be managed through our cookie preferences panel. For full details, see our Cookie Notice.
We may update this Privacy Notice from time to time. Material changes will be communicated via email or through the platform with at least 30 days notice. Continued use after changes take effect constitutes acceptance of the updated notice.
Data Protection Officer: dpo@guardianhub.com
Registered Address: [Company Registered Address — to be completed]
Supervisory Authority: Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
You have the right to lodge a complaint with the ICO or your local supervisory authority if you believe our processing of your personal data infringes applicable data protection law.
This Privacy Notice is an unapproved draft. Before publishing, qualified legal counsel must review and confirm: all data processing purposes and lawful bases, retention periods for each category of personal data, international transfer mechanisms and adequacy determinations, subprocessor disclosures, cookie classifications, and all company identity and registered address details. References to “SOC 2” or similar certifications have been intentionally omitted as they must only appear if verifiably held.