UK Privacy Notice

1. Who we are

SENTRL AI develops privacy-conscious environmental intelligence for fly-tipping detection. For website enquiries and our own business administration, SENTRL AI is the data controller. Email privacy questions to info@sentrl-ai.com.

For a customer camera deployment, the council, estate, business or other deploying organisation will usually decide why and how camera data is processed and will normally be the controller. SENTRL AI may act as its processor under a written data processing agreement. The signed deployment documents determine the parties' exact roles.

2. Information we may collect

• Identity and business contact details supplied through enquiries or pilot discussions.
• Account, role, authentication and authorised-contact information.
• Device identifiers, camera connection metadata, site names, system health and diagnostic logs.
• Incident metadata such as time, monitored zone, detection category, confidence and review status.
• Short incident snapshots or clips only where a deployment is configured and legally authorised to retain them.
• Messages, support requests and records needed to manage our relationship.

3. Why we use information and lawful bases

We use personal information to respond to enquiries, plan and provide pilots, secure accounts, connect devices, detect and manage environmental incidents, support users, improve reliability, prevent misuse and meet legal obligations.

Depending on the activity, our lawful basis may be taking steps before or performing a contract, legitimate interests, compliance with a legal obligation, consent where required, or a customer's public task. Camera deployments require a documented lawful basis and proportionality assessment. Consent is rarely an appropriate basis for monitoring people in public spaces.

4. Camera, AI and incident data

SENTRL AI is designed to analyse camera activity at or near the edge and create a focused incident when temporal validation indicates likely fly-tipping. It is not designed as a general-purpose facial recognition system, and we do not offer identity matching as part of the fly-tipping service.

We do not retain a continuous central video archive by default. A customer may lawfully configure limited incident evidence where necessary for review, investigation or enforcement. That evidence must have a defined retention period, restricted access and human review. The deploying organisation is responsible for signage, transparency, lawful basis, a data protection impact assessment where required and responding to individuals whose data is captured.

5. Sharing and processors

We may use vetted hosting, email, communications, security and support providers only where required to run the service. We may also disclose information to professional advisers, regulators, courts or law-enforcement bodies where legally required or properly authorised. We do not sell personal information.

6. International transfers

If a provider processes personal information outside the UK, we will use an available lawful transfer mechanism and appropriate safeguards, such as UK adequacy regulations or the UK International Data Transfer Agreement/Addendum, where required.

7. Retention

Enquiry and business records are kept only as long as reasonably needed for the relationship, legal obligations and dispute handling. Account and diagnostic data follow operational retention schedules. Camera incident retention is deployment-specific and should be the shortest period compatible with the documented purpose. Deleted information may remain briefly in protected backups before routine expiry.

8. Your rights

Depending on the circumstances and lawful basis, you may have rights of access, rectification, erasure, restriction, objection and data portability, and the right to withdraw consent where consent is used. To exercise a right, contact us and tell us enough to identify the relevant data. We may need to verify your identity.

You can complain to the UK Information Commissioner's Office. Visit ico.org.uk/make-a-complaint. We would appreciate the chance to address your concern first.

9. Children and vulnerable people

The website and commercial service are not directed at children. Camera operators must account for the heightened risks to children and vulnerable people when selecting locations, purposes, safeguards and retention.

10. Voluntary community reports

Community waste-location submissions have a separate reporting privacy notice. They require no name or account, keep evidence private and publish only reviewed area statistics. They are separate from local-authority reports and are not taken from private customer incidents.

11. Waiting list and demo requests

We collect your name and email address, and optional organisation, city/country, area of interest and notes. Demo requests may include a preferred time. Registrations are stored in our Cloudflare database and emailed to support@sentrl-ai.com and info@sentrl-ai.com through Purelymail; we also send you a transactional confirmation. Email delivery may fail even when the request is saved, which the website will explain.

The waiting-list checkbox records your consent to SENTRL launch and pilot availability emails, with the notice version and registration time. A demo request does not enrol you in waiting-list updates. Leave through the confirmation email link or contact support. The link requires an explicit confirmation; opening it alone does not remove your registration. Leaving deletes the live waiting-list database record. Prior registration emails may remain in company mailboxes under our business-record retention policy; the current list must be checked before sending updates.

We keep waiting-list details while needed for the updates you requested, until you leave or the purpose ends, with periodic review. Demo details follow the enquiry retention policy. Short-lived hashed security counters are stored separately to limit email abuse; network addresses are not included in registration records. Cloudflare still processes network information to deliver and secure the site.

12. Changes

We will update this notice when our product, providers or legal obligations materially change. The effective and review dates at the top show the current version.