Privacy Policy

Velra Agency Ltd trading as UrbanTrack is the operator of the UrbanTrack website and platform.

For website enquiries, demo requests, direct marketing site interactions, and some account administration data, Velra Agency Ltd will generally act as controller.

For client operational data stored inside the platform, the relevant client organisation will generally act as controller and UrbanTrack will generally act as processor or service provider on that client's behalf.

The categories of personal data we may handle depend on how a person interacts with the service.

• Website visitors: technical usage data, cookie preferences, IP and device data, and pages visited.
• Demo and sales contacts: name, work email, employer, role, enquiry details, call notes, and follow-up records.
• Organisation users: account details, role information, audit logs, sign-in activity, assigned workflow actions, and profile details.
• Public reporters: issue descriptions, optional contact details, location data, uploaded images, and any follow-up updates needed to handle a report.
• Contractors and delivery users: contact details, assignment records, activity history, uploaded evidence, and completion notes.

We use personal data to operate the website, respond to enquiries, provide the service, manage security, support customer onboarding, maintain platform records, and improve how the product works.

Depending on the context, processing may rely on contract, legitimate interests, legal obligation, consent, or another lawful basis that applies to the relevant interaction.

This policy should be kept aligned with the live tooling and operational processes used on the website and platform.

UrbanTrack may store uploaded files and images, including report photos, evidence of completed works, and related metadata needed to process or verify operational activity.

Uploaded files may include personal data if the submitting user or client organisation chooses to include it. We recommend client organisations avoid collecting unnecessary special category or excessive personal data unless it is genuinely required.

Uploads may be retained with the relevant record for audit, service history, dispute handling, and accountability purposes.

We may share data with hosting, storage, email, security, and support providers where needed to operate the service responsibly.

If optional analytics or measurement tooling is introduced later, this policy should be updated to describe that processing clearly.

We may also share data where required by law, to protect rights and safety, to investigate misuse, or to support client organisations under contract.

A more detailed sub-processor list can be provided during procurement, onboarding, or DPA review where appropriate.

We retain data only for as long as necessary for the purpose for which it was collected, together with any additional period needed for security, legal, contractual, audit, or operational record keeping.

Infrastructure or support providers may process data outside the UK where this is necessary to operate the service. Where international transfers apply, appropriate safeguards should be used.

Our Security page summarises the technical and organisational measures used to protect the platform at a high level.

Individuals may have rights to access, rectify, erase, restrict, object, or complain about processing, depending on the circumstances.

Where a client organisation controls the operational data, privacy requests about reports or local service records should usually be directed to that organisation first.

For platform-level privacy enquiries, contact support@urbantrack.app. General enquiries can be sent to support@urbantrack.app. Formal company registration and registered office details are available during procurement, contracting, or on request.