PRIVACY POLICY.

1. Who we are

This website is run by A-Squared Alarms("we", "us", "our"), the company behind Vape Sense, a vape and smoke detection system for schools, healthcare, hospitality and commercial buildings. We are the data controller for the personal data described in this policy.

You can contact us about anything in this policy at info@a-squaredalarms.com.

2. What we collect

2.1 When you browse this website

Like every website, our hosting provider receives the technical information your browser sends when it loads a page (such as your IP address, browser type and the page requested) so that it can deliver the page and keep the service secure. We do not use advertising tools and we do not build profiles of visitors.

If you accept analytics cookies, we use Google Analytics to understand how the site is used: pages viewed, how you arrived (for example from a search), your approximate location (country or city), device and browser type, and whether you sent an enquiry. Google Analytics does not store your full IP address.

2.2 When you contact us

If you send us an enquiry through the contact form or by email, we collect what you give us:

• Your name and email address
• Phone number (if provided)
• Organisation name and building type
• Details about your site, such as the number of rooms
• The content of your message

2.3 Vape Sense customers

Vape Sense systems run on the customer's own network, and the data they produce stays on the customer's site. Where we provide support or services that involve that data, we act as a data processor on the customer's behalf under our agreement with them.

Vape Sense sensors read the air only. They contain no camera or microphone and do not capture images, audio or anything that identifies a person.

3. How we use your data

• To reply to your enquiry, arrange a demonstration or prepare a quote
• To provide and support the products and services you buy from us
• To meet our legal and regulatory obligations

We do not sell your data, and we do not send marketing emails unless you have asked us to.

4. Legal basis

• Legitimate interests — to respond to enquiries you send us
• Contract — to take steps you ask for before a contract, and to deliver it
• Legal obligation — where the law requires us to keep or share data
• Consent — for analytics cookies and any marketing, which you can withdraw at any time

5. Who we share it with

We use a small number of service providers, who may only use your data to provide their service to us:

• Web3Forms — delivers messages from our contact form to our email inbox
• Our email provider — stores the enquiries and emails we receive
• GitHub Pages — hosts this website
• Google Analytics (Google Ireland Ltd) — website statistics, only if you accept analytics cookies

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or an adequacy decision. We may also disclose data where the law requires it.

6. How long we keep it

We keep enquiries for up to 3 years after our last contact with you, so that we can follow up and keep a record of quotes. Customer records are kept for as long as our contract and the law require.

7. Cookies

We only set analytics cookies if you click "Accept" on our cookie bar. If you click "Reject", or do nothing, no analytics cookies are set and Google Analytics is not loaded. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.

• _ga, _ga_* — Google Analytics: tell visits apart so we can count them. Kept for up to 2 years. Only with your consent.
• Your cookie choice — stored in your browser so we don't ask again on every page. Strictly necessary; it contains no personal data.

We do not use advertising or cross-site tracking cookies.

8. Security

The website is served over an encrypted (HTTPS) connection, and enquiries are sent to us encrypted. Access to enquiries is limited to the people who need it to respond.

9. Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Ask us to delete your data
• Restrict or object to how we use it
• Receive your data in a portable format
• Withdraw consent at any time, where we rely on consent

To use any of these rights, email info@a-squaredalarms.com. We will reply within one month.

10. Complaints

If you are unhappy with how we have handled your data, please tell us first at info@a-squaredalarms.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

11. Changes to this policy

We will update this page if anything changes, and show the date of the latest version at the top. See also our privacy & security overview of the Vape Sense product.