Your data, handled with care.

Who we are

The people responsible for your data

ColdAssure is a service of DVM IOT Solutions Ltd, registered in England and Wales, company number 15438850. We are the data controller for the information described on this page. If you have any question about your data, or you want to exercise one of the rights below, write to us at privacy@coldassure.com and a person will answer.

What we collect

Only what the service needs

• Account details. Your name and email, and a password that we store only as a secure one way hash, never as plain text.
• Sensor readings. Temperature, humidity, door activity, and battery level from the sensors installed at your site. This is the live record the service exists to keep.
• Enquiry details. If you use a form on this site, the name, business, email, and any message you choose to send.
• Service logs. Basic technical information needed to run the service safely and to keep it secure.

Why we use it

Our lawful basis

• To provide the service. Holding your readings, showing your dashboard, and keeping the record is how we deliver what you signed up for. Lawful basis: performance of our agreement with you.
• To keep in touch about your enquiry. If you contact us, we use your details to reply. Lawful basis: our legitimate interest in answering you.
• To keep the service secure. We use limited logs to protect the service and your data. Lawful basis: our legitimate interest in security.
• To meet legal duties. Where the law requires us to keep or disclose certain records, we do so.

Who can see it

Your data stays yours

We do not sell your data and we do not share it for marketing. To run the service we rely on a small number of trusted providers, and each one only handles what the service needs:

• Google Cloud hosts the service and stores your data.
• Google Workspace holds our business records, including enquiry details.
• Telegram delivers the alerts you ask us to send.
• Resend sends our service emails, such as sign in links, from within the EU.

We may also share data where the law requires it, or to protect the service and its users from harm.

Where it is held

Storage and transfers

Your data is held on Google Cloud. Where any data moves outside the United Kingdom, we make sure it stays protected by appropriate safeguards recognised under UK data protection law.

How long we keep it

Kept while it is useful, then removed

We keep your account and sensor records while you use the service, and for a reasonable period afterwards, because your food safety record may need to be available after the fact. Enquiry details are kept for a limited period. You can ask us to delete your data at any time, and we will unless the law requires us to keep it.

How we protect it

Security

Connections to the service are encrypted. Access to your data is limited to what is needed to run the service. Passwords are stored only as secure hashes. If anything ever affects the security of your data, we act quickly and tell you where the law requires it.

Your rights

What you can ask us to do

Under UK data protection law you can ask us to:

• Show you a copy of the data we hold about you.
• Correct anything that is wrong.
• Delete your data, where we are not required to keep it.
• Limit or object to how we use it.
• Provide your data in a portable form.

Write to privacy@coldassure.com to exercise any of these. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, though we hope you will come to us first so we can put things right.

Changes

Updates to this page

If we change how we handle your data, we will update this page and change the date at the top. For a meaningful change we will tell you directly.