Privacy notice

1. Controller and scope

DIGIDENT LTD, company 17055539, is the controller for account administration, service security, billing records, support, optional marketing and the creation and operation of FleetStart Radar's public-source signal products. Contact us at digidentAI@proton.me or at our registered office below.

This notice covers website visitors, account users, prospective and current business customers, marketing subscribers, support contacts and people whose professional or business-related information appears in the official public sources we monitor. Customers are separate controllers for their own prospecting decisions, exports and private workspace content. For private Customer content, DIGIDENT may act as processor under our data processing terms.

2. Personal data we process

• Account data: name, work email, company, role or buyer type, territory, password hash, verification status and account preferences.
• Security and technical data: session identifiers, IP-derived security records, login attempts, timestamps, request and error logs, device/browser information supplied in requests and audit events.
• Billing data: chosen plan, billing interval, GoCardless customer, mandate, subscription and payment references, payment state, paid-through date and cancellation history. We do not store full bank-account details.
• Service content: saved notes, pipeline status, public contact details entered by users, job locations, filters, exports and support correspondence.
• Marketing data: consent record, source, preferences, confirmation and unsubscribe status, and email delivery history.
• Public-source data: organisation and trading names, licence or registration identifiers, business or operating addresses, publication events, professional names or roles and other information made available by official registers or public websites.

3. Sources

We receive data directly from users and Customers; from service providers such as Cloudflare, GoCardless and Resend; and from public sources including Traffic Commissioner publications, CQC data, DfT Street Manager open data, Companies House and publicly accessible organisation websites. Customers may add their own research and notes.

4. Purposes and lawful bases

5. Public-source professional data

Some official records concern sole traders, named licence holders, registered managers, directors or other identifiable professionals. We minimise the fields presented, keep source links and dates, avoid special-category data, do not use the service to make decisions with legal or similarly significant effects, and require Customers to verify records and comply with marketing law.

This published notice is intended to make that processing transparent. Providing individual notice to every person in large, changing official datasets may involve disproportionate effort. We keep that assessment under review and apply safeguards including restricted customer access, purpose limitation, correction routes and objection handling. You may object to this use or ask us to correct a record by emailing digidentAI@proton.me with enough detail to identify it.

6. Sharing

We share data only as needed with Cloudflare for hosting and security; Resend for email; GoCardless for payment administration; authorised Customer users; advisers, insurers and authorities where necessary; and a genuine business successor subject to safeguards. GoCardless separately controls the payer and bank information it collects. We do not sell account-user personal data or provide live records for unrestricted public download.

7. International transfers

Some suppliers may process data outside the UK. Where UK data-protection law requires safeguards, we use an adequacy regulation, the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, plus proportionate technical and contractual measures. Contact us for information about the safeguard relevant to a particular supplier.

8. Retention

• Account and contract records: while active and generally up to six years afterwards for contract, tax and legal claims.
• Provider payment and cancellation records: generally six years after the relevant accounting period or contract ends.
• Security, session, rate-limit and operational logs: the shortest useful period, normally no more than 12 months unless needed for an incident or claim.
• Private workspace content: during active service and a limited recovery/export period after closure, then deleted or anonymised unless retention is legally required.
• Marketing records: until consent is withdrawn or the address is inactive, with a minimal suppression record retained to honour an unsubscribe.
• Public-source signals and baselines: while needed to identify and evidence relevant changes, with stale or corrected records refreshed, restricted or removed where appropriate.

9. Security

We use access controls, password hashing, secure session cookies, rate limiting, signed provider webhooks, least-privilege secrets, encrypted transport, audit records, monitoring and managed infrastructure controls. No online service is risk-free. We assess and notify personal-data breaches as required by law.

10. Your rights

Depending on the circumstances, you may have rights of access, correction, erasure, restriction, portability and objection. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing.

Your right to object: you may object to processing based on legitimate interests, including public-source professional data. You have an absolute right to object to direct marketing. Email digidentAI@proton.me; marketing emails also include an unsubscribe route.

We may need to verify identity and clarify a request. Rights can be limited where exemptions or another person's rights apply. You may complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

11. Automated processing

Signals may be automatically classified, scored and deduplicated to prioritise commercial relevance. This does not produce legal or similarly significant effects about an individual. Customers decide independently whether to research or contact an organisation.

12. Cookies and storage

The service currently uses only storage strictly necessary for requested functions such as authentication, session security and abuse prevention. We do not currently use advertising or behavioural-tracking cookies. See the cookie notice. Non-essential technology will not be activated before the required information and consent mechanism are provided.

13. Changes and contact

We review this notice when products, suppliers, sources or law change. Material changes will be highlighted where appropriate. The version and effective date appear above.