Privacy Notice
Last updated: 8 July 2026
1. Who we are
CCTV Inspector is provided by Ross & Sons Digital LTD ("we", "us"). We are the data controller for personal data we process about you as a user of the Service.
2. What we collect
- Account data: name, email address, hashed password / auth provider identifier.
- Service data: cameras, sites, fault reports, schedules, service history, and images you upload.
- Support data: messages you send us and their metadata.
- Usage & device data: IP address, browser, device identifiers, log data, and product telemetry.
- Billing data: handled by Paddle (see section 5). We store a customer/subscription identifier only.
3. Why we use it (purposes & legal basis)
- Provide the Service — performance of our contract with you.
- Account creation, authentication, and access control — performance of contract.
- Customer support — performance of contract / legitimate interests.
- Security, abuse prevention, and fraud detection — legitimate interests and legal obligation.
- Product improvement and analytics — legitimate interests.
- Service-related communications — performance of contract; marketing only with consent.
- Legal and tax compliance — legal obligation.
4. Cookies
We use strictly necessary cookies and local storage for authentication and to keep you signed in. We do not currently use advertising cookies. If we add analytics or marketing cookies we will update this notice and (where required) ask for your consent.
5. Who we share data with
- Paddle.com — our Merchant of Record. Paddle processes your payment, subscription, tax, and invoicing data, and handles refund and billing requests.
- Hosting & infrastructure providers — for cloud hosting, database, storage, and email delivery, acting as our processors.
- Support tooling — to respond to your enquiries.
- Professional advisers — legal, accounting, and audit where necessary.
- Authorities — where required by law or to protect our rights.
6. International transfers
Some of our providers are located outside the UK / EEA. Where personal data is transferred, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or adequacy decisions.
7. Retention
We keep account and service data for as long as your account is active. If you close your account we delete or anonymise your data within a reasonable period, except where we must keep records to meet legal, tax, or accounting obligations (typically up to 7 years for invoicing records).
8. Your rights
Subject to applicable law (including UK GDPR / EU GDPR) you have the right to:
- Access, correct, or delete your personal data.
- Restrict or object to certain processing.
- Request portability of data you provided.
- Withdraw consent, where processing is based on consent.
- Complain to your local data protection authority (in the UK, the ICO at ico.org.uk).
To exercise these rights email Rossandsonsdigital@gmail.com. We will respond within one month.
9. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect personal data against unauthorised access, alteration, or loss.
10. Changes to this notice
We may update this notice from time to time. Material changes will be highlighted on this page and, where appropriate, notified to you by email.