Privacy Policy

Who we are

HRA Patrol is a guard-tour and patrol-verification service operated by Human Risk Advisory (humanriskadvisory.ie). The app is used by security guards employed or contracted by our client companies. Your employer (the security company) is the controller of your data; we process it on their behalf.

What we collect

Account: your name, username and an encrypted PIN, created for you by your supervisor.
Location: your GPS coordinates at the moment you scan a checkpoint, to prove the scan happened at the right place. We do not track your location in the background or when you are off shift.
Activity: checkpoint scans, incidents, SOS alerts and shift handovers you submit, with their time and device identifier.

How it is used

Solely to operate the patrol-verification service: showing supervisors that rounds were completed, flagging missed or out-of-place scans, and producing compliance reports for the site's client. We do not sell your data, use it for advertising, or share it with third parties for their own purposes.

Cookies, analytics & error monitoring

Essential cookies keep you signed in and the service working. Beyond those, we use a small number of trusted providers that process data only on our instructions, never for their own purposes, and with EU/EEA hosting:

Product analytics — PostHog, EU-hosted. In the web console, only if you accept when asked, we record which pages and features are used, plus recordings of the console screen with every input and all on-screen text masked — so recordings show navigation and layout, never names, PINs, incident notes or visitor details. You can decline and change your mind at any time. In the guard app we log a few basic usage events (such as sign-in, patrol started and checkpoint scanned) to understand how the app is used and improve it — there is no screen recording. This runs on the basis of our legitimate interest.
Error & performance monitoring — Sentry, EU-hosted. Collects crash reports and error diagnostics from the console and the guard app so we can fix faults. It is configured not to attach your name or IP address. As this is necessary to keep the service secure and working, it runs on the basis of our legitimate interest.

Storage & retention

Data is stored on EU-hosted infrastructure and encrypted in transit. Visitor sign-in logs are automatically deleted after your employer's retention period (90 days by default). Patrol records — the scans, rounds and incident reports that serve as proof of service — are kept for as long as your employer's service agreement requires them as evidence. If you request account deletion, your personal details are removed within 30 days; any patrol records you were linked to remain but no longer carry your identity.

Your rights

You may request access to, correction of, or deletion of your data. You can delete your account in the app (Account → Request account deletion) or see Account & data deletion for all the options. Because your employer controls your account, requests are actioned subject to legal retention obligations.

Contact

Human Risk Advisory — humanriskadvisory.ie