Privacy policy
Last updated: July 2026
This notice explains how Astragrid Technologies Ltd ("we", "us") handles personal data in FloodSense, under the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Registered office: 86-90 Paul Street, London, EC2A 4NE. Information Commissioner's Office registration ZB992067. Contact: misi@floodsense.uk.
Our role
We are the controller for personal data about people who contact us through the website. For the account and flood-asset data held on behalf of an organisation that licenses FloodSense, that organisation is the controller and we act as its processor under a Data Processing Agreement.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Booking form: name, work email, organisation, role, message | To respond to demo and pilot enquiries | Legitimate interests; steps before a contract |
| Account: name, email, organisation, role, sign-in data | To give licensed users access and attribute actions | Processed on the customer's instruction |
| Field inspections: inspector identity, notes, photos, optional location | To record authoritative asset-condition evidence | Processed on the customer's instruction |
| Technical: essential cookies, server and platform logs | To keep you signed in and the service secure | Legitimate interests (security and integrity) |
We do not process special category data, and we do not use the service for advertising or profiling of individuals. Earth observation imagery is of land and water and contains no personal data.
Cookies
We use only essential cookies needed to sign you in and keep the service secure. We do not use advertising or third-party tracking cookies.
Who we share it with
We use a small set of reputable providers to run the service (hosting, database, email, and the booking form), each under a Data Processing Agreement. They are listed in our sub-processor register, available on request and summarised on our trust and security page. We never sell your personal data.
Where it is held
Our primary database is hosted in the United Kingdom (London). Where a provider processes data outside the United Kingdom, we rely on a UK adequacy decision or standard contractual clauses.
How long we keep it
We keep personal data only as long as there is a purpose or a legal requirement, then delete or anonymise it. Enquiry details are kept for up to 24 months; account and inspection records are kept for the life of the licence and returned or deleted at the customer's choice on exit.
Your rights
You have rights to access, rectify, erase, restrict, and object to the processing of your personal data, and to data portability. Where the customer is the controller (account and inspection data), please raise the request with that organisation; we will assist them. For data we control, contact misi@floodsense.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).
Security
We protect personal data with tenant isolation enforced by Row-Level Security, least-privilege and invite-only access, encryption in transit and at rest, and access logging. More detail is on our trust and security page.
Changes
We may update this notice. The date at the top shows when it last changed.