Legal Pages

Noctua Security Services Ltd ("we", "us", "our") is committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what data we collect through our app and website, how we use it, and your rights regarding your personal data.

Account creation: Users can create accounts using an email address and password, or via Google single sign-on (OAuth). Account credentials are used to authenticate users and provide access to the appropriate features of our platform based on their role (administrator, door supervisor, or venue client).

Data we collect — we collect the following types of personal data through our app:

• Name — for user accounts, door supervisor profiles, venue client contacts, and persons named in incident reports.

• Email address — for user accounts, venue client contacts, and enquiry responses.

• User IDs — unique identifiers for authenticated users (administrators, door supervisors, and venue clients).

• Address — venue addresses for operational assignments, and addresses of persons involved in incident reports.

• Phone number — for door supervisor contacts, venue client contacts, enquiry responses, and incident witnesses.

• Photos — door supervisor profile photographs uploaded by administrators or the supervisors themselves.

• Files and documents — venue safety reports, risk assessments, site briefs, contracts, and invoice files uploaded by authorised users.

• Other user-generated content — public reviews (ratings, comments, and tags), incident report details, inspection notes, and venue daily notes.

• Device or other IDs — a client-side device fingerprint is generated when a member of the public submits a review, used solely to prevent duplicate reviews for the same officer.

• App interactions — page views and key actions are logged for audit and security purposes, available to administrators.

How we use your data: Data is used for app functionality (shift scheduling, venue management, incident reporting, and check-in tracking), account management (authentication and profile management), analytics (review-based performance scoring and leaderboard calculations), and fraud prevention and compliance (duplicate review prevention and incident report records).

Data sharing: We do not share your personal data with third parties. Review content and supervisor profile information (name, title, photo, SIA number, and bio) is displayed publicly within our app, but is not transmitted to external third-party services.

Data retention: Your data is stored securely and retained only for as long as necessary to fulfil the purpose for which it was collected. Operational records such as shift logs and incident reports are retained in accordance with industry compliance requirements.

Security: All data collected by our app is encrypted in transit using HTTPS/TLS. Data is stored on secure servers with appropriate access controls.

Your rights: You have the right to request access to, correction of, or deletion of your personal data at any time. To request deletion, visit our data deletion page at noctuasecurityservicesltd.co.uk/delete-account or contact us at admin@noctuasecurityservicesltd.com.