Privacy Notice
Last updated: 8 July 2026
1. Who we are
CamCare Pro is provided by Ross & Sons Digital LTD ("we", "us"). We are the data controller for personal data we process about you as a user of the Service.
2. What we collect
- Account data: name, email address, hashed password / auth provider identifier.
- Service data: cameras, sites, fault reports, schedules, service history, and images you upload.
- Support data: messages you send us and their metadata.
- Usage & device data: IP address, browser, device identifiers, log data, and product telemetry.
- Billing data: handled by Paddle (see section 5). We store a customer/subscription identifier only.
3. Why we use it (purposes & legal basis)
- Provide the Service — performance of our contract with you.
- Account creation, authentication, and access control — performance of contract.
- Customer support — performance of contract / legitimate interests.
- Security, abuse prevention, and fraud detection — legitimate interests and legal obligation.
- Product improvement and analytics — legitimate interests.
- Service-related communications — performance of contract; marketing only with consent.
- Legal and tax compliance — legal obligation.
4. Cookies
We use strictly necessary cookies and local storage for authentication and to keep you signed in. We do not currently use advertising cookies. If we add analytics or marketing cookies we will update this notice and (where required) ask for your consent.
5. Who we share data with
- Paddle.com — our Merchant of Record. Paddle processes your payment, subscription, tax, and invoicing data, and handles refund and billing requests.
- Hosting & infrastructure providers — for cloud hosting, database, storage, and email delivery, acting as our processors.
- Support tooling — to respond to your enquiries.
- Professional advisers — legal, accounting, and audit where necessary.
- Authorities — where required by law or to protect our rights.
6. International transfers
Some of our providers are located outside the UK / EEA. Where personal data is transferred, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or adequacy decisions.
7. Retention
We keep account and service data for as long as your account is active. If you close your account we delete or anonymise your data within a reasonable period, except where we must keep records to meet legal, tax, or accounting obligations (typically up to 7 years for invoicing records).
8. Your rights
Subject to applicable law (including UK GDPR / EU GDPR) you have the right to:
- Access, correct, or delete your personal data.
- Restrict or object to certain processing.
- Request portability of data you provided.
- Withdraw consent, where processing is based on consent.
- Complain to your local data protection authority (in the UK, the ICO at ico.org.uk).
To exercise these rights email info@rosssonsdigital.co.uk. We will respond within one month.
9. Deleting your data
You can erase your data yourself at any time, without contacting us:
- Delete your account: open Profile → Delete your account, type DELETE and confirm. This immediately and permanently removes your login, profile, cameras, sites, fault reports, site maps, uploaded images, service history, sessions and role records.
- Delete an organisation: an organisation manager can open Organisation → Delete this organisation, type the organisation name and confirm. This permanently removes the organisation and all records belonging to it — cameras, faults, maps, service history, engineer jobs, invitations and join requests — for every member.
- Removing or suspending a team member: a manager can suspend a member (their login stays, but access to organisation data stops immediately) or remove them from the organisation. Removal ends their access; records they created remain with the organisation, since the organisation is the controller of that operational data.
- If you are the only manager: deleting your account also deletes the organisations you solely manage. Appoint another manager first if the team should keep its data.
- By request: email info@rosssonsdigital.co.uk and we will complete the deletion within 30 days and confirm once done.
Deletion is immediate in our live systems. Encrypted backups are rotated out within 30 days. We retain only what the law requires — principally billing and tax records held by Paddle for up to 7 years — and anonymous, non-identifying usage statistics.
10. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect personal data against unauthorised access, alteration, or loss.
11. Changes to this notice
We may update this notice from time to time. Material changes will be highlighted on this page and, where appropriate, notified to you by email.