Privacy Policy

Last updated: 23 October 2026

1. Who we are

Duckham Meridian Group Limited (“DMG Ltd”, “we”, “us”) is the data controller for personal data processed through ProtectThread. Registered in England. Contact: [email protected].

2. Data we collect

We collect: account details (name, email, password hash), organisation and site information, premises capacity and type data, procedure documents, training records, drill and incident logs, and audit trail entries. Sensitive fields (names, phone numbers, notes, incident details, floor plans and procedure documents) are encrypted at field level using AES-256-GCM.

3. How we use your data

We process your data to provide the ProtectThread service, including tier checking, SIA notification pack generation, procedure building, training tracking, drill and incident logging, and inspection pack generation. We also use your data to send service notifications (password resets, training reminders).

4. Legal basis

Our legal basis for processing is: (a) performance of our contract with you; (b) legitimate interests in providing and improving the service; and (c) your consent where required.

5. Data sharing

We do not sell your data. We share data only with: our hosting and infrastructure providers (to deliver the service), and where required by law. Inspector View links share read-only, watermarked data with recipients you choose.

6. Data retention

We retain your data for as long as your account is active. After account deletion, we retain audit log entries for 7 years (regulatory requirement). You can request data export or erasure at any time through Settings > GDPR.

7. Your rights

Under the UK GDPR, you have the right to: access, rectify, erase, restrict processing, data portability, and object to processing. Contact [email protected].

8. Security

We use AES-256-GCM field-level encryption, hash-chained audit logs, HTTPS-only cookies, TOTP two-factor authentication, and role-based access control.

9. Changes

We may update this policy. Material changes will be notified by email.