← Back to ScanLoc8

Privacy Policy

Last updated: 20 October 2026

Who we are

ScanLoc8 is an RFID tag scanning and tracking service, powered by Levata. We are the data controller for website enquiries and account details, and a data processor for the operational data our customer companies store in ScanLoc8.

Contact: simon.barnsley@levata.com

What we collect

  • Account details: name, email address, company, role and password (stored securely, never readable by us).
  • Contact enquiries: name, email, company, phone number and your message.
  • Operational data: RFID tag numbers, items, locations, scan times and reader details entered by your company.
  • Alerts: rule alerts sent to chosen users, in the app and by email.
  • Technical data: sign-in records and basic logs needed to keep the service secure.

Why we use it (lawful basis)

  • To provide the service to your company — contract.
  • To reply to enquiries — legitimate interests.
  • To keep accounts and data secure — legitimate interests and legal obligation.

We do not sell personal data or use it for advertising. We only use cookies and browser storage needed to keep you signed in.

Who processes it for us

Our hosting, database and email sending providers process data on our behalf under contract, with appropriate safeguards for any transfer outside the UK.

How long we keep it

Account data is kept while the account is active and deleted when the account is removed. Contact enquiries are kept for up to 12 months. Operational data is kept for as long as your company's agreement requires.

Security

Data is encrypted in transit (HTTPS) and at rest. Each company's data is kept separate, access is role-based, administrators use two-step sign-in, and fixed readers use per-company keys.

Your rights

You can ask to access, correct, delete or export your personal data, or object to or restrict its use. Email us and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).