Draft for review by our legal adviser before launch.
These terms form part of every business customer's agreement with us. A signed copy is available on request.
Roles
The customer is the controller of its staff data. We are the processor, and we process that data only on the customer's documented instructions, which are set by how the customer configures and uses SafetyEvo, unless the law requires otherwise.
What we process
- Staff names, work contact details, roles and teams.
- Location, battery and signal while a shift is open, and phone health checks.
- Alerts, check-in timers, welfare checks, notes and incident outcomes.
- Sign in records and an audit log of who viewed what.
Our commitments
- Everyone at SafetyEvo with access to customer data is bound by confidentiality.
- We keep appropriate security in place, including encryption in transit, two-step sign in for console users, role checks on every request and an audit log. See our security page.
- We use only the listed sub-processors, under written terms, and give notice before adding one.
- We help the customer answer staff requests to see, correct or delete their data, and with data protection impact assessments.
- We tell the customer without undue delay, and within 48 hours, after becoming aware of a personal data breach affecting their data.
- When the agreement ends, we delete or return the customer's data within 30 days, unless the law requires us to keep it.
- We make available the information needed to show we meet these terms, and allow reasonable audits.
Retention
Location trails are deleted after the period the customer sets. Incident records are kept for the period the customer sets for insurance and legal reasons.
Contact
Data protection questions: hello@safetyevo.co.uk.