Privacy policy

Who we are

TheTranzit is operated by [legal entity name], [registered address]. For questions about this policy, write to [privacy contact address].

What we collect

Three kinds of data, for three different reasons.

• Account data — the name, phone number and role of each user, so people can sign in and so an administrator can see who did what.
• Business data you enter — your products, customers, orders and visits, including a customer’s contact details and address, and the time and place of a visit check-in.
• Technical data — the usual server logs, device and browser information, and error reports, used to keep the service running and to diagnose faults.

Enquiries from our website

If you fill in the form on our get started or contact pages, we keep the name, company, phone number and, where you give them, the email address and location you entered, so a member of our team can reply. We use those details to respond to you and for nothing else.

Location

Where your company has enabled visit check-ins, we record the location of a check-in at the moment an agent confirms it. We do not track a device continuously, and we do not record location in the background.

Check-in locations are visible to the administrators of your own company and to nobody else.

Why we are allowed to hold it

We process account and business data to perform the contract with your company, technical data for our legitimate interest in running a secure and reliable service, and enquiry details on the basis of your request that we get in touch.

Who sees it

Your business data is visible to the users of your own company, according to their role. We do not sell personal data and we do not share it for advertising.

• Service providers who help us run the product — hosting, databases, SMS delivery for one-time codes and error monitoring — under contracts that limit them to acting on our instructions.
• Authorities, where the law genuinely requires it.
• A buyer, if the business is sold, in which case this policy continues to apply until it is replaced.

Where it is held

Data is hosted on managed cloud infrastructure in [region]. Where data moves outside its home region, we rely on the safeguards the law requires. [Hosting region and sub-processor list to be confirmed.]

How long we keep it

Business data is kept while the account is open. When an account closes, we keep it for a limited period so it can be exported, and then delete it. Logs are kept for a shorter period. [Exact retention periods to be confirmed.]

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Write to [privacy contact address] and we will respond within the period the law allows.

If the data was entered by your employer, we may need to pass your request to them, because the data is theirs to decide about.

Cookies and storage

We use browser storage to keep you signed in and to remember your theme choice. We do not use advertising or third-party tracking cookies.

Changes to this policy

We may update this policy. The date at the top shows when it last changed, and we will tell account administrators about material changes before they take effect.