UK Privacy Notice

1. Who we are

SENTRL AI develops privacy-conscious environmental intelligence for fly-tipping detection. For website enquiries and our own business administration, SENTRL AI is the data controller. Email privacy questions to info@sentrl-ai.com.

For a customer camera deployment, the council, estate, business or other deploying organisation will usually decide why and how camera data is processed and will normally be the controller. SENTRL AI may act as its processor under a written data processing agreement. The signed deployment documents determine the parties' exact roles.

2. Information we may collect

• Identity and business contact details supplied through enquiries or pilot discussions.
• Account, role, authentication and authorised-contact information.
• Device identifiers, camera connection metadata, site names, system health and diagnostic logs.
• Incident metadata such as time, monitored zone, detection category, confidence and review status.
• Short incident snapshots or clips only where a deployment is configured and legally authorised to retain them.
• Messages, support requests and records needed to manage our relationship.

3. Why we use information and lawful bases

We use personal information to respond to enquiries, plan and provide pilots, secure accounts, connect devices, detect and manage environmental incidents, support users, improve reliability, prevent misuse and meet legal obligations.

Depending on the activity, our lawful basis may be taking steps before or performing a contract, legitimate interests, compliance with a legal obligation, consent where required, or a customer's public task. Camera deployments require a documented lawful basis and proportionality assessment. Consent is rarely an appropriate basis for monitoring people in public spaces.

4. Camera, AI and incident data

SENTRL AI is designed to analyse camera activity at or near the edge and create a focused incident when temporal validation indicates likely fly-tipping. It is not designed as a general-purpose facial recognition system, and we do not offer identity matching as part of the fly-tipping service.

We do not retain a continuous central video archive by default. A customer may lawfully configure limited incident evidence where necessary for review, investigation or enforcement. That evidence must have a defined retention period, restricted access and human review. The deploying organisation is responsible for signage, transparency, lawful basis, a data protection impact assessment where required and responding to individuals whose data is captured.

5. Sharing and processors

We may use vetted hosting, email, communications, security and support providers only where required to run the service. We may also disclose information to professional advisers, regulators, courts or law-enforcement bodies where legally required or properly authorised. We do not sell personal information.

6. International transfers

If a provider processes personal information outside the UK, we will use an available lawful transfer mechanism and appropriate safeguards, such as UK adequacy regulations or the UK International Data Transfer Agreement/Addendum, where required.

7. Retention

Enquiry and business records are kept only as long as reasonably needed for the relationship, legal obligations and dispute handling. Account and diagnostic data follow operational retention schedules. Camera incident retention is deployment-specific and should be the shortest period compatible with the documented purpose. Deleted information may remain briefly in protected backups before routine expiry.

8. Your rights

Depending on the circumstances and lawful basis, you may have rights of access, rectification, erasure, restriction, objection and data portability, and the right to withdraw consent where consent is used. To exercise a right, contact us and tell us enough to identify the relevant data. We may need to verify your identity.

You can complain to the UK Information Commissioner's Office. Visit ico.org.uk/make-a-complaint. We would appreciate the chance to address your concern first.

9. Children and vulnerable people

The website and commercial service are not directed at children. Camera operators must account for the heightened risks to children and vulnerable people when selecting locations, purposes, safeguards and retention.

10. Changes

We will update this notice when our product, providers or legal obligations materially change. The effective and review dates at the top show the current version.