TRACKS.IT
Legal

Privacy Policy

Effective date: April 2026
Last updated: April 2026

Tracks IT Consultancy ("we", "us", "our") provides independent, dollar-quantified undercarriage and Ground Engaging Tools wear analysis. This policy explains what personal data we collect, how we use it, who we share it with, where we store it, and the rights you have. It is aligned with the EU General Data Protection Regulation (GDPR), the UAE Personal Data Protection Law (PDPL), the Saudi PDPL, and South Africa's POPIA.

1. Who we are

Tracks IT Consultancy, Abu Dhabi, United Arab Emirates. For privacy questions: privacy@tracksengineering.com.

2. What data we collect

  • Contact data you submit through our forms: name, company, job title, country, work email, phone (optional), estimated fleet size.
  • Inspection data uploaded to our platform by your team: machine identifiers, wear measurements, photos.
  • Web analytics: page views, device type, referrer, IP address (anonymised), session duration.
  • Cookies: essential cookies for session and preferences. Analytics cookies only with consent (see Section 11).

3. Lawful basis for processing

We process your data on the following legal bases:

  • Contract performance — to deliver the platform and reports you have engaged us for.
  • Legitimate interest — to operate, secure and improve our service.
  • Consent — for marketing communications, where you have opted in.

4. How we use your data

To deliver the wear analytics, reports and consultancy you have engaged us for; to operate and improve the platform; to communicate with you about your engagement; and — only with your explicit consent — to send you relevant industry updates. We do not sell or share your fleet data.

5. Who we share it with

Limited subprocessors that help us run the service. Current subprocessors:

  • Lovable (web hosting and front-end)
  • Supabase (application backend, EU region)
  • Amazon Web Services (cloud infrastructure)
  • Our email service provider for transactional and consented marketing email
  • Our CRM provider for managing customer relationships

A current list of subprocessors is available on request to privacy@tracksengineering.com. We notify customers of any material change to subprocessors at least 30 days in advance.

6. Where we host the data

Customer data is hosted in EAME-resident infrastructure (AWS Bahrain for GCC and African customers, AWS Frankfurt for European customers). Customers may select their region at onboarding.

7. How long we keep it

  • Contact data from website forms: 24 months from last interaction.
  • Customer inspection data: for the duration of the contract plus 30 days post-termination, after which it is permanently deleted.
  • Web analytics: 14 months.
  • Marketing consent records: until consent is withdrawn.

8. Cross-border transfers

Where data is transferred outside the EU/EEA or UAE, we apply Standard Contractual Clauses (SCCs) and supplementary safeguards as required by GDPR Article 46 and UAE PDPL Article 22.

9. Your rights

Under GDPR, UAE PDPL, and equivalent regulations you have the right to: access your data, rectify it, erase it ("right to be forgotten"), restrict processing, object to processing, data portability, and withdraw consent at any time. To exercise any right, email privacy@tracksengineering.com — we respond within 30 days.

10. Confidentiality and security

All client data is treated as confidential and is covered by our standard NDA on every engagement. Inspection data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access is role-based, MFA is mandatory for all Tracks IT staff, and all access to customer data is logged.

11. Cookies

We use essential cookies for session management. Analytics and preference cookies require your consent, which can be withdrawn anytime via the cookie preferences link in the footer.

12. Children

Our service is not directed at anyone under 18.

13. Changes to this policy

We may update this policy. Material changes will be notified via email and a prominent notice on the website at least 30 days in advance.

14. Contact

Privacy questions or data requests: privacy@tracksengineering.com.