Privacy Policy

01. Introduction

Dutio ("we", "our", "us") provides a workforce management platform specifically designed for UK-based security agencies. This policy outlines how we handle data collected through our web portal and mobile applications.

02. Data Controller vs. Data Processor

Under UK data protection law, the security agency (our client) is the Data Controller. You determine the purposes and means of processing personal data. Dutio acts solely as the Data Processor, processing data exclusively on your documented instructions to provide our software services.

03. Data We Process

• ▪ Location Data: We process background GPS and geolocation data exclusively during active shifts to facilitate geofenced clock-ins and ensure lone-worker safety. Tracking terminates immediately upon clock-out.
• ▪ Identity & Compliance: We process SIA license numbers to automate compliance blocking, preventing unauthorized deployment.
• ▪ Media: Photos uploaded for incident reporting and evidence sync are securely stored and tied to specific shift records.

04. Data Retention & Sub-processors

Data is stored securely on Google Cloud (Firebase) servers located in the UK/EU. GPS telemetry is retained only as long as necessary to generate client payroll and compliance reports, after which it is anonymized or purged per the agency's retention policy.