Privacy Notice

"Site Robotics" ("we", "us", "our") designs and operates autonomous robots and connected sensing systems used to monitor industrial and commercial sites, including security patrol, asset monitoring and site intelligence deployments. This notice explains how we collect, use, share and protect personal information when you visit our website, contact us, take part in a pilot or use our platform, and when our robots or sensors are deployed on a site.

We are the controller of the personal information described in this notice unless stated otherwise. Where we act as a processor on behalf of a customer — for example, when operating a robot on their site under their instructions — this is explained in the relevant section below and in our contract with that customer.

We collect information in a few different ways, depending on how you interact with us.

• Information you give us directly — your name, job title, company, email address, phone number and any details you include when you contact us, request a pilot, book a call or complete a form.
• Information collected automatically from our website — technical and usage information such as IP address, browser and device type, pages viewed and referring pages, collected through cookies and similar technologies (see Cookies).
• Information generated through a pilot or deployment — imagery, sensor data, location data, telemetry and event data captured by our robots and platform while operating on a customer site (see Robotics pilots and deployments).
• Information from third parties — for example, from a company you work for when they engage us, from publicly available business sources, or from partners who refer you to us.

When you visit siterobotics.co.uk, we and our service providers may automatically collect limited technical information, including IP address, device and browser type, general location inferred from IP address, pages visited, and the date and time of your visit. We use this information to operate and secure the website, understand how it is used, and improve it. We do not use website analytics to build a profile of individual visitors, and we do not sell this information.

When you complete a contact form, request a pilot, or book a Zoom call with us, we collect the information you provide — such as name, work email, company, country and the details of your enquiry — so that we can respond, arrange a call, and follow up about a potential pilot or deployment. We keep this information for as long as reasonably necessary to progress the enquiry and for a reasonable period afterwards in case you contact us again, after which it is deleted or anonymised.

This section explains the personal information our robots and platform may capture while carrying out a pilot or live deployment on a customer's site, and how responsibility for that information is shared between Site Robotics and the customer.

During a pilot or deployment, our robots and connected sensors may capture:

• Images and video of the site, which may incidentally include people present on or near the site.
• Location and mapping data, including the physical layout of the site used to plan and validate a route.
• LiDAR and other spatial sensing information, used to help the robot navigate and detect obstacles; this data is primarily geometric and is not designed to identify individuals, though in combination with imagery it may relate to identifiable people.
• Timestamps recording when observations, events or sensor readings occurred.
• Event data, such as a detected access point being open, an area being occupied outside expected hours, or an obstruction on a route.
• Robot telemetry, including battery status, diagnostics and operating logs used to monitor and maintain the robot itself.
• Mission and route data describing where and when a robot travelled or was tasked to patrol or inspect.

Controller and processor roles. For most pilots and deployments, the customer on whose site the robot operates determines the purpose and manner of monitoring — for example, which areas are observed and what events are flagged — and is the controller of any personal information captured on their site. Site Robotics typically acts as a processor, operating the robot and platform on the customer's instructions and under a written agreement that sets out how that information must be handled. Where Site Robotics determines its own purposes for using data — for example, to maintain and improve the underlying platform — we act as controller for that limited purpose. The specific arrangement for a given deployment is set out in the contract with that customer.

We use personal information to:

• respond to enquiries and arrange calls or pilots;
• provide, operate, maintain and improve our robots and platform;
• monitor and support a live deployment on a customer's behalf;
• keep our website and systems secure;
• comply with our legal and contractual obligations; and
• where you have agreed, send you marketing communications about our products and services.

Depending on the purpose, we rely on one or more of the following lawful bases under UK GDPR:

• Legitimate interests — for example, responding to enquiries, operating and securing our website, and improving our products, balanced against your interests and rights.
• Performance of a contract — for example, delivering a pilot or deployment for a customer, or providing our platform under a services agreement.
• Consent — for example, for marketing communications where consent is required, which you can withdraw at any time.
• Legal obligation — for example, where we are required to retain or disclose information to comply with the law.

Where we process personal information as a processor on behalf of a customer, the customer determines the lawful basis for that processing, and we process it only on their documented instructions.

Where you have asked to hear from us or otherwise given your consent, we may send you information about our products, pilots and industry updates by email. You can opt out at any time using the unsubscribe link in any marketing email, or by contacting privacy@siterobotics.co.uk. Opting out of marketing will not affect service or operational communications, such as messages about an active pilot or enquiry. Any electronic marketing we send is carried out in line with the Privacy and Electronic Communications Regulations (PECR).

We do not sell personal information. We may share personal information with:

• service providers who support our website, communications, customer relationship management, and platform infrastructure, acting on our instructions and under appropriate contractual protections;
• the customer whose site a robot is deployed on, where we act as their processor, so that they can review activity captured on their own site;
• professional advisers, such as legal, insurance or accounting advisers, where necessary;
• law enforcement, regulators or other third parties where we are required to do so by law, or to protect the safety of people or property; and
• a buyer or successor in the event of a reorganisation, merger or sale of all or part of our business, subject to appropriate safeguards.

We are a UK-based company and primarily store and process personal information within the UK. Where we use service providers located outside the UK, or where a deployment requires data to be accessible internationally, we put appropriate safeguards in place, such as the UK's International Data Transfer Agreement or the EU Standard Contractual Clauses (as adapted for UK use), or we rely on a UK adequacy decision covering the destination country.

We keep personal information only for as long as necessary for the purposes described in this notice, taking into account legal, accounting and reporting requirements. Enquiry and marketing information is typically retained for a limited period after our last meaningful contact with you, after which it is deleted or anonymised. Data captured during a pilot or deployment is retained in line with the retention terms agreed with the relevant customer, and is deleted or returned at the end of that agreement unless we are required to keep it for longer — for example, to comply with the law or resolve a dispute.

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure, including access controls, encryption of data in transit, and restricting access to personal information to those who need it to do their job. No system is completely secure, and we continue to review and improve our security measures over time.

Subject to certain exceptions and conditions under UK data protection law, you have the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• request erasure of your personal information;
• restrict or object to certain processing, including direct marketing;
• receive a copy of your information in a portable format, where applicable; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at privacy@siterobotics.co.uk. Where we process information as a processor on behalf of a customer, we will direct your request to that customer or support them in responding, as appropriate.

Our robots and platform may automatically detect, classify or flag activity, objects or conditions observed on a site — such as an open access point, an unexpected presence in an area, or a possible fault. These automated outputs are intended to support human review and decision-making, not to replace it. We do not use fully automated decision-making that produces legal or similarly significant effects on individuals without human involvement. Any action taken in response to a flagged event — such as contacting security personnel or escalating an incident — is made by a person, either at Site Robotics or at the relevant customer.

Our robots capture imagery and sensor data as part of their normal operation on a customer's site. Individuals present on or near a site during testing or deployment may incidentally appear in this imagery, in the same way they might appear on conventional CCTV. This imagery is used for the purposes described in this notice — principally site monitoring, security and operational awareness — and is handled in line with the retention and access terms agreed with the relevant customer.

As explained in Robotics pilots and deployments, the controller/processor role for this imagery depends on the specific deployment: in most cases the customer determines how monitoring is carried out and is the controller of imagery captured on their site, and Site Robotics operates the robot and platform as their processor. Where a site is clearly signposted with information about robotic monitoring, that signage is provided or agreed with the customer in line with their own obligations under data protection law.

Our website uses cookies and similar technologies to make the site work properly, understand how it is used, and improve it over time. These typically fall into the following categories:

• Strictly necessary cookies, required for the website to function and cannot be switched off.
• Analytics cookies, which help us understand how visitors use the site so we can improve it.
• Preference cookies, which remember choices you have made, such as cookie consent settings.

Where required by law, we ask for your consent before setting non-essential cookies, and you can change your cookie preferences at any time through your browser settings or, where available, our cookie preference tool.

Our website and platform may use third-party services, such as hosting providers, analytics tools, video conferencing (for example, Zoom, for calls you choose to book) and customer relationship management software. These providers process personal information on our behalf and are contractually required to protect it and use it only for the purposes we specify. We link to and reference third-party services for convenience; this notice does not cover how those third parties independently process information outside their role in supporting Site Robotics, and we encourage you to review their own privacy notices.

Our website and services are intended for business use and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@siterobotics.co.uk and we will take appropriate steps to remove it.

We may update this notice from time to time to reflect changes in our practices, technology, legal requirements or the way we operate. We will update the "last updated" date at the top of this notice when we make changes, and where changes are significant, we will take reasonable steps to bring them to your attention.

If you have a concern about how we handle personal information, we would welcome the chance to address it directly — please contact us at privacy@siterobotics.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent regulator for data protection, at ico.org.uk or by calling 0303 123 1113.

Questions about this notice, or about how we handle personal information, can be sent to privacy@siterobotics.co.uk.

Site Robotics
United Kingdom