Who is responsible
TraceID Ltd is registered in England and Wales with company number 16802403. Our registered office is Abacus House, Pennine Business Park, Longbow Close, Huddersfield HD2 1GQ. For data protection questions, email [email protected].
This page summarises how we meet the UK GDPR, the Data Protection Act 2018 and, for customers and people in the EU, the EU GDPR. Our privacy policy sets out the detail.
Controller and processor
We are the controller for this website and for enquiries sent to us. For the data customers put into the TraceID Hub, whether in Verified or Traced, the customer is the controller and we are their processor, acting only on their instructions.
Lawful bases
- Legitimate interests: replying to enquiries, keeping our systems secure, and cookieless, aggregated website analytics.
- Contract: providing the Hub to the customers we have an agreement with.
- Legal obligation: keeping or disclosing information where the law requires it.
Where data is stored
Hub data is stored in Amazon Web Services in London (eu-west-2): the database, uploaded files and photos all stay in that region.
International transfers
Data leaves the UK only where one of our sub-processors handles it elsewhere. Where that happens, we rely on the appropriate safeguards that the UK GDPR and EU GDPR require. The sub-processors are listed on our security page.
Security
Data is encrypted in transit and at rest, access is controlled by role, and every action in the Hub is written to an insert-only audit log. Our security page describes the measures in full.
Your rights
You can ask for a copy of your data, have it corrected, have it deleted or its use restricted in some circumstances, object to processing based on legitimate interests, and receive data you gave us in a portable format. Email [email protected] and we will reply within one month.
If your data is held in a customer's Hub account, that customer is the controller. We will pass your request to them and help them respond.
Complaints
Please tell us first if you are unhappy, so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk, or, if you are in the EU, to the data protection authority in your country.
Data Processing Agreement
Customers using the Hub can ask for our Data Processing Agreement, which covers both the UK GDPR and the EU GDPR.