Skip to content
SENSOLYTICA
Drafts as at 12 October 2026. General information only, not legal advice. These documents have not yet been reviewed by a solicitor and may change before the platform goes live. Take your own professional advice before relying on them.

Privacy notice

How Sensolytica handles personal data about the people who use the portal, and what it processes on behalf of the organisations that run shore nodes and drive units.

Last changed 4 September 2026. About a 2 minute read.

Who we are

Sensolytica makes sensing hardware and a platform that harbour authorities, councils and transport operators use to keep one sealed record of what moves through the places they look after. Company registration details will be added here once confirmed.

For anything about this notice, write to [email protected].

Two kinds of personal data

We handle two different kinds of personal data, and our role is different for each.

  • People who use the portal: name, work email, role, sign-in times and the actions they take, such as setting a verdict. We are the controller for this data.
  • What the units record: images, vessel names and registration marks, speeds, positions and readings from the motor controllers of electric outboards. The organisation that runs the shore node or drive unit is the controller; we process this data on its instructions under a data processing agreement.

Why we process portal data

To provide the platform and keep it secure, which is necessary for our contract with your organisation and in our legitimate interests.

To keep an audit trail of who decided what and why, which your organisation needs to rely on its record.

We do not use portal data for marketing, and we do not sell it.

Where it is kept

In the United Kingdom. Frames are held in encrypted object storage and the database is encrypted at rest. Every organisation’s data is kept apart in the database itself.

Who we share it with

Only the providers we need to run the platform, each under a written agreement:

  • Hosting, database and sign-in: Supabase, UK region.
  • Evidence storage: Cloudflare R2.
  • Email for sign-in links and alerts: Resend.
  • Payments: Stripe. Card details go to Stripe and never pass through us.

How long we keep it

Portal accounts: while your organisation’s subscription runs, and 12 months after.

The audit trail: 7 years, so a decision can still be explained.

What the units record: as your organisation sets it. By default, passes within the limit are anonymised after 30 days and every record is deleted after 24 months.

Your rights

You can ask for a copy of your data, and for it to be corrected, erased or restricted, or object to how it is used. For anything a unit recorded, ask the organisation that runs it; we help them answer.

You can complain to the Information Commissioner’s Office at ico.org.uk.

Security

Every reading is sealed with a SHA-256 hash when it lands and chained to the one before, so a change would show. Access by Sensolytica staff is limited by role, needs a stated reason and appears in your organisation’s activity log.

Questions about this document: [email protected]. Draft as at 12 October 2026; not legal advice.