Privacy Policy

Introduction

We are a Republic of Ireland-incorporated B2B SaaS company that creates digital twins of infrastructure in the UK and Ireland. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with applicable data protection laws, including the UK GDPR and the EU GDPR.

If you have any questions or concerns about this Policy, please contact us at: support@traceintercept.ai.

By using our service ("Service"), you agree to the details in this Policy.

Who We Are

For the purposes of data protection law, we act as the Data Controller when handling your personal data.

Company Name: Trace Intercept

Email: support@traceintercept.ai

Data We Collect

We collect and store no personal information. All authentication is done with MS Entra through water company assignment of access. What personal information is displayed is requested from Entra and is not persisted in the Trace application

How We Use Your Data

1. Account Setup: We only use anonymized tokens from MS Entra and do not persist any personal information.
2. Service Operation: We use technical data to make our Service faster, safer, and more reliable.
3. Communication: We will not send individual users any unsolicited emails.

Legal Basis

Under Article 6 of the UK and EU GDPR, we rely on the following legal bases:

• Contract – Processing is necessary to provide our Service (Article 6(1)(b))
• Legitimate Interests – For service improvement, fraud prevention, and security (Article 6(1)(f))

Data Sharing

• No Sharing with Other Customers: We do not share personal or organizational data with other clients.
• Third-Party Services: We may use trusted services (like our hosting or authentication provider). These parties are bound by contractual obligations equivalent to the GDPR requirements.

International Transfers

Our primary servers are located in the European Economic Area (EEA). If we transfer your data outside the EEA, we will ensure appropriate safeguards are in place, including:

• Adequacy Decisions (for countries deemed to provide adequate protection)
• Standard Contractual Clauses (SCCs) approved by the European Commission or UK Government.

Data Retention

We do not retain any personal data.

Security Measures

We implement appropriate technical and organisational measures to safeguard your personal data. These include:

• Data encryption in transit and at rest
• Use of secure data centres (e.g., Microsoft Azure)
• Regular audits and monitoring
• Role-based access controls and logging of user activity

Please note: security is a shared responsibility, and we encourage users to use secure passwords and report any suspicious activity.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website. If you keep using our Service after changes are posted, it means you agree to them.