Privacy Policy
DRAFT — not yet reviewed by counsel. This text describes how the website actually works and is a starting point for legal review, not a substitute for it.
Who we are
This website is operated by ZeroIncidents. Contact details are in the footer and on the contact page.
What this website collects
Analytics. We measure how the site is used with our own software, running on our own server. No third-party analytics service is ever involved. We record the page visited, the referring site, any campaign parameters in the address, a coarse device type, your viewport width, a browser and operating system name, your browser's language, a country inferred from that language, how long the page stayed open and how far down it you scrolled.
This happens in one of two ways, depending on a choice you are asked to make the first time you visit.
If you decline, we distinguish one visitor from another using a one-way hash of your IP address, your browser's user agent and a secret value that changes every day. The hash cannot be reversed, and because the secret changes daily it cannot be used to recognise you tomorrow. Your IP address itself is never written to disk. This is the default and it never stops.
If you accept, we additionally store a cookie containing a random identifier. It is not derived from anything about you and means nothing outside this site. It lets us see that a visit is a return visit, how many visits somebody has made, how long between them, and which source originally brought them here — none of which is possible with the daily hash. The cookie lasts a year. Declining later deletes both the cookie and the record behind it.
Forms. If you request a demo or contact us, we keep what you send: your name, business email address, company, and anything you write. We also record the page you submitted from, the referring site and any campaign parameters in the address, so we know which of our pages were useful. We use this to reply to you and to understand our own marketing.
Live chat. If you open a chat we store the conversation, together with your IP address, your browser's user agent and the page you started from, so the person replying has some context. This is the one place on this website where an IP address is stored. It is visible only to our team and is deleted when the conversation is deleted.
Cookies
This website sets no advertising cookies and no third-party cookies of any kind. It sets a small number of strictly necessary ones — a session identifier for the analytics, an anonymous key so a chat conversation can be found again, and a session cookie if you sign in to the administration area — and one optional analytics cookie that is set only if you agree to it. See the cookie policy for the detail.
How long we keep things
Analytics records are aggregated into daily totals and the detail is kept for as long as it remains useful for reporting. Enquiries and chat conversations are kept so there is a record of what was asked, offered and agreed. We do not run a scheduled deletion job; records are removed by hand when they are no longer needed.
Who else sees it
Nothing on this website is shared with an advertising network or a data broker. Fonts are served from our own server, not from a content delivery network, so loading a page does not tell anyone else that you did.
Your rights
You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to the address in the footer and we will respond. You may also complain to your national data protection authority.
The ZeroIncidents product
This policy covers this website. The ZeroIncidents product deployed in a customer's facility is governed by the agreement with that customer, who is the controller of the data it processes. Video processing can be performed on-site, and the product supports anonymisation and face blurring where required.