Data Protection Policy

Who we are

Tektrans Limited (company number 15354373) is the sales, service and client support entity within the Arrowsmith Analytics Group. We supply and manage computer vision-based road safety and traffic enforcement systems for local authorities, councils, police forces and public sector transport bodies across the UK. Our technology is developed by our sister company Pulsare, also part of the Arrowsmith Analytics Group.

Our dual role under UK GDPR

Our data protection principles

We process all personal data in accordance with the seven principles of UK GDPR:

What data we hold and why

Public sector client contacts

We hold names, job titles, work email addresses and phone numbers for individuals at local authorities, councils, police forces and transport bodies who engage with us about our solutions. This information is used to manage enquiries, deliver projects, maintain service contracts and communicate relevant updates.

Website enquiries and prospective clients

When someone contacts us through our website, we collect the information they provide — typically name, organisation, contact details and a description of their traffic management or road safety challenge. This is used solely to respond to the enquiry and, where appropriate, to follow up about our services.

Operational and contract records

For active managed service contracts, we maintain records relating to the deployment, configuration and ongoing operation of our systems at client sites. These records may include details of the client organisation, site locations, system performance data and correspondence relating to the delivery of services.

Surveillance and enforcement system data (processor role)

Where Tektrans operates highway surveillance and enforcement systems on behalf of a public sector client, the data collected by those systems — including vehicle images, automatic number plate recognition (ANPR) data, and road user behaviour analytics — is processed strictly on behalf of and under the instruction of that client. Tektrans does not use this operational data for its own purposes. Retention periods, access controls and data subject rights relating to that data are governed by the relevant Data Processing Agreement and the policies of the controlling public sector body.

Arrowsmith Analytics Group and Pulsare

As part of the Arrowsmith Analytics Group, Tektrans may share relevant business and operational data with Pulsare (our technology development company) and with the Group where necessary to deliver services and manage the business. All intra-group data sharing is governed by appropriate agreements and handled in accordance with UK GDPR.

Lawful bases for processing

• Contract performance — to deliver managed service contracts with public sector clients
• Legitimate interests — to manage client relationships, respond to enquiries and develop our business
• Legal obligation — to meet record-keeping, regulatory and contractual compliance requirements
• Public task — where processing supports the delivery of road safety and traffic enforcement functions carried out by our public sector clients in the public interest
• Consent — for any direct marketing communications

How long we keep data

• Website enquiry and contact data — up to 2 years
• Client contact and relationship records — for the duration of the relationship and up to 6 years after it ends
• Managed service contract and operational records — up to 6 years after contract end
• Financial and invoicing records — up to 7 years (HMRC requirement)
• Surveillance and enforcement system data — as specified in the relevant Data Processing Agreement with the public sector client

All data is securely deleted or anonymised once it is no longer needed.

Data security

Given the sensitive nature of the technology we provide and the public sector environments we operate in, we apply robust technical and organisational security measures across all data we hold or process. These include access controls, encrypted communications, secure system architecture and regular security reviews. Our managed service systems are designed and operated to meet the security expectations of local authority and public sector procurement requirements.

In the event of a personal data breach that poses a risk to individuals, we will notify the ICO within 72 hours as required by law, and will inform affected controllers and individuals where necessary.

Who we share data with

We do not sell personal data. We may share it in limited and necessary circumstances with:

• Pulsare and other Arrowsmith Analytics Group entities, under intra-group data sharing agreements
• Public sector clients, in connection with the delivery and management of their enforcement schemes
• Trusted IT infrastructure and service providers, under appropriate data processing agreements
• Regulatory bodies, law enforcement or authorities, where required by law

We do not transfer personal data outside the UK or European Economic Area without appropriate safeguards in place.

Your rights

Under UK GDPR, you have the following rights in relation to personal data that Tektrans holds about you in its capacity as data controller:

If your request relates to data collected by a traffic enforcement scheme operated in your area, please contact the relevant local authority or public sector body, as they are the data controller for that information. We will respond to all requests within one calendar month.

ICO registration and complaints

Changes to this policy

We may update this policy from time to time to reflect changes in the law, our services or the way we operate. The date at the top of this page will always show when it was last reviewed.