Privacy Policy

SafeTrace is a corporate traveller safety platform operated by SafeTrace Ltd. We provide real-time safety monitoring tools for organisations with travelling employees, including SOS alerts, location check-ins, and crisis communications.

For the purposes of data protection law, SafeTrace Ltd is the data controller for personal data collected through our platform. If you have questions about this policy, please contact us at privacy@safetrace.io.

We collect the following categories of personal data:

• Account information — your name, work email address and password when you register
• Company information — your company name, industry, size and region when your organisation signs up
• Location data — your GPS coordinates when you check in or trigger an SOS alert
• Usage data — check-in timestamps, SOS alert history and messages sent through the platform
• Device information — device type and operating system, collected automatically when you use the app

We do not collect payment card information, passport details, or any sensitive personal data beyond what is listed above.

We use your personal data for the following purposes:

• To provide the SafeTrace service — processing check-ins, SOS alerts, and communications
• To enable your employer's security team to monitor your safety while travelling
• To send notifications related to your safety status
• To maintain and improve the platform
• To comply with legal obligations

We do not use your data for advertising, profiling, or any purpose unrelated to the SafeTrace service.

Location data is central to the SafeTrace service. Here is exactly how it works:

• When we collect it — only when you actively press Check In or trigger an SOS alert. We do not track your location continuously in the background.
• What we collect — your GPS coordinates (latitude and longitude) at the moment you check in or send an SOS
• Who sees it — only administrators of your company's SafeTrace account
• How long we keep it — check-in location data is retained for 90 days. SOS alert data is retained for 12 months for audit purposes.

We do not sell your personal data. We share data only in the following circumstances:

• Your employer — administrators of your company's SafeTrace account can see your check-in history, location data and SOS alerts
• Firebase (Google) — we use Google Firebase to store data and authenticate users. Firebase operates under Google's privacy standards and is GDPR compliant
• Legal requirements — we may disclose data if required by law, court order, or to protect the safety of individuals

We never share your data with advertisers, data brokers, or any third party for commercial purposes.

All SafeTrace data is stored on Google Firebase servers located in the European Union (London and Belgium regions). We implement the following security measures:

• All data is encrypted in transit using TLS/SSL
• All data is encrypted at rest by Firebase
• Access to the admin dashboard requires authentication
• Firebase security rules restrict data access to authorised users only
• Passwords are hashed and never stored in plain text

Under GDPR you have the following rights regarding your personal data:

• Right of access — you can request a copy of all personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can request deletion of your personal data
• Right to data portability — you can request your data in a machine-readable format
• Right to object — you can object to certain types of processing
• Right to restrict processing — you can ask us to limit how we use your data

To exercise any of these rights, contact us at privacy@safetrace.io. We will respond within 30 days.

We retain your personal data for the following periods:

• Account data — retained while your account is active and for 30 days after deletion
• Check-in data — retained for 90 days
• SOS alert data — retained for 12 months
• Messages — retained for 90 days
• Company data — retained while the company account is active and for 30 days after cancellation

You can request early deletion of your data at any time by contacting us.

SafeTrace is a professional business tool intended for use by adults in a corporate context. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately at privacy@safetrace.io.

We may update this privacy policy from time to time. When we make significant changes, we will notify users via email and update the "Last updated" date at the top of this page. Your continued use of SafeTrace after changes are posted constitutes acceptance of the updated policy.

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

• Email: privacy@safetrace.io
• Website: mysafetrace.netlify.app

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.