1. Who provides this service
CMS Lite is provided by Tracking, at Not specified for this installation; contact the service provider.. You can contact us about this notice at Not specified for this installation; contact the service provider..
This notice explains how personal information is handled when you use this installation of the service, its apps, connected devices and support channels. The installation-specific details at the end form part of this notice.
- ProviderTracking
- Websitehttps://lite.codemonkey.uk.com
2. Who decides how your information is used
If you obtain the service directly from us, Tracking decides why and how your account information is used, as described below.
If an organisation gives you access to the service, that organisation generally decides why it uses location, vehicle, operational and user-activity information. We process that information to provide the service on its instructions. Your organisation should also give you its own privacy information about its use of the service, including its purposes, lawful basis, retention and who can see the information. Contact your organisation for questions about those decisions.
We make our own decisions about information needed to run our business, provide support, secure the service and meet our legal obligations. Where we do so, we are responsible for that processing.
3. Information we handle
Depending on the features used in this installation, we may handle:
- Account and contact information, such as names, work contact details, account identifiers and authentication information.
- Device, vehicle and location information, including identifiers, positions, journeys, events and alerts sent by connected devices or entered by users.
- Service activity, such as sign-ins, changes made in the platform, audit records, diagnostics, security events and support requests.
- Communications needed to deliver the service, including email, text and push-notification addresses and the content of alerts.
- Billing information where we bill you directly. Payment card details are handled by the payment provider identified in the installation details; we receive payment status and related records.
- Information you choose to submit to optional features, including any optional AI-assisted feature enabled for your account.
The exact categories available to an organisation depend on its account settings, devices and enabled features.
4. How information is used
We use information to provide accounts and requested functions; receive and display device data; show maps, journeys and alerts; deliver notifications; provide support; prevent misuse; investigate faults; protect the service; and keep records required for billing and legal compliance.
Where we decide the purpose of processing, the applicable reason under privacy law is shown in the installation details. Where an organisation controls the information, it must identify and explain its own reason for using it. Optional features are used only when enabled or invoked by an authorised user or account administrator.
We do not assume that all connected devices encrypt their transmissions. Device transport and any optional encryption depend on the device and account configuration.
5. Maps, messages and optional AI
A map provider may receive requests for the map area being viewed and technical information needed to deliver map content, such as an internet address. The service adds device positions to the map separately; viewing a map does not itself mean the provider receives the device?s precise position. The providers and routing used by this installation are listed below.
If notifications are enabled, relevant contact details, device identifiers and alert content may be sent to the email, text or push-notification provider used by this installation.
If an optional AI feature is enabled and used, the information submitted for that request may be sent to the configured AI provider. The installation details identify the provider, the data sent and any account-level choices available. Do not enter information into an optional AI feature unless your organisation permits it.
7. Security and account controls
We use access controls, encrypted connections for web and app access, audit records and measures to protect the servers and backups used for this installation. Account administrators can configure available security features, including permissions and any optional session or device-encryption settings. The measures applied to this installation are described below.
No method of transmission or storage removes all risk. Please tell us promptly if you believe an account or device has been compromised.
8. How long information is kept
We keep information for the periods shown in the installation details, or for the period set by the organisation that controls it where the service allows that organisation to choose. Different periods may apply to live records, archives, audit records, diagnostics, billing records and backups.
Deletion from the live service may not remove a record immediately from an existing backup. Backups are replaced or expire under the schedule shown below. If a backup is restored, we take appropriate steps to reapply deletions where required.
9. Where information is processed
The countries used for primary hosting, backups, support access and external providers for this installation are listed below. They may differ between installations. If information is transferred between countries, the organisation responsible for that transfer will use the applicable legal mechanism, where one is required. Contact us for details of the mechanism relevant to this installation.
The location of a server alone does not decide which privacy law applies to you or to the organisations using the service.
10. Your choices and rights
Your available rights depend on the privacy law that applies to your information. They may include requesting access or correction, asking for deletion or restriction, objecting to certain uses, withdrawing consent where consent is used, and complaining to a privacy regulator.
If your organisation supplied your account, contact it first about its use of your information. You can also contact us at Not specified for this installation; contact the service provider.; we will direct the request to the organisation where appropriate or respond to the processing for which we are responsible. The relevant privacy law, regulator and contact route for this installation are listed below.
You can manage the account and notification choices made available to you in the service. Your organisation?s administrator controls organisation-wide settings and access.
11. Children
The service is intended for use by authorised customers and their users. An organisation using the service is responsible for deciding whether its use involves children and for providing any additional information or protections required by the applicable law.
12. Changes to this notice
We may update this notice when the service, its providers or legal requirements change. We will publish the updated text with a new date and provide additional notice where required.
Installation-specific details
Service and contacts
- Service
- CMS Lite
- Provider
- Tracking
- Address
- Not specified for this installation; contact the service provider.
- Privacy email
- Not specified for this installation; contact the service provider.
- Support contact
- Not specified for this installation; contact the service provider.
Account and privacy roles
For direct accounts, Tracking is responsible for Not specified for this installation; contact the service provider.
For organisation-provided accounts, the organisation identified in your account or invitation is responsible for its operational use of the information; Tracking provides the service and is responsible for Not specified for this installation; contact the service provider.
Applicable law and contact for rights
- Applicable law and scope
- Not specified for this installation; contact the service provider.
- Privacy regulator
- Not specified for this installation; contact the service provider.
- Organisation-provided account requests
- Not specified for this installation; contact the service provider.
Reasons for our own processing
Not specified for this installation; contact the service provider.
Hosting and access locations
- Primary hosting
- Not specified for this installation; contact the service provider.
- Backups
- Not specified for this installation; contact the service provider.
- Support and administration access
- Not specified for this installation; contact the service provider.
Providers in use
Not specified for this installation; contact the service provider.
Retention
- Live location and operational records
- Available live for approximately three months, then archived; deleted after five years at the latest.
- Audit records
- Two years.
- Diagnostics and security logs
- 90 days.
- Billing records
- Five years.
- Backups
- Daily and weekly backups are replaced or expire after about three months.
- Account-controlled retention
- No account-controlled retention setting is available for these periods.
Security options
- Enabled measures
- Not specified for this installation; contact the service provider.
- Optional administrator features
- Not specified for this installation; contact the service provider.
Maps, notifications and AI
- Map provider and request routing
- Not specified for this installation; contact the service provider.
- Notification channels and providers
- Not specified for this installation; contact the service provider.
- Optional AI status, provider and data sent
- Not specified for this installation; contact the service provider.
Deleting your account
Ask your organisation's administrator to remove an organisation-provided account. For a direct account, ask us at Not specified for this installation; contact the service provider. to delete your account and include your account name. We will explain any records we must retain. Uninstalling the app does not delete the account.
Mobile app
The mobile app uses your phone's location only while you use the relevant feature; we do not collect your phone location in the background. It has no advertising SDK, third-party analytics SDK or App Set ID. Biometric data never leaves your device. Payment card details go directly to Stripe. Push notifications may use OneSignal when configured.