Overview
At Ground Patrol, we believe that everyone has the general right to Privacy, and specifically, should be able to exercise fine-grained control over how their personal information is used by an organization. To this end, Ground Patrol aspires to not only meet the requirements of the various privacy legislation that applies to customer and employee base, but also extend a common set of rights which exceeds these requirements to everyone who interfaces with Ground Patrol.
This document describes how we do this, and how users of Ground Patrol products and services can exercise those rights.
Scope
This policy applies to the entire Ground Patrol organization, including its products and services. There are no exceptions.
‘Ground Patrol’ refers to the legal entity, Ground Patrol,LLC headquartered at 590 Pioneer Mountain Loop,Jerome Idaho 83338. ‘Products and services’ are defined as any application developed by Ground Patrol for use by our customers, such as the Ground Patrol Dashboard, or any physical hardware products shipped by Ground Patrol that connect to these services.
Ground Patrol’s Role
Depending on the nature of the relationship between an individual and Ground Patrol, Ground Patrol’s classification in regards to its role in data privacy can change, and this can alter how Ground Patrol responds to requests for information. It does not, however, alter our commitment to safeguarding personal information that we’ve been entrusted with during the course of business.
Data Collection with Hardware
As part of our services, Ground Patrol LLC provides hardware at no cost with a deposit. The hardware provided is used for data collection purposes to better understand and serve our clients’ needs.
Types of Data Collected
The hardware may collect various types of data, including but not limited to Test point voltage, environmental data, usage patterns, and operational feedback. This data is gathered to optimize performance and provide insights for improvement.
Deposit Policy
To ensure the hardware is returned in good condition, we require a deposit. This deposit is refundable upon return of the hardware in satisfactory condition. The deposit amount and terms will be clearly communicated during the hardware provision process.
Ground Patrol as a data collector
If Ground Patrol collects personally identifiable information from you directly, for example, if you register for an account on the Ground Patrol platform, or purchase a Ground Patrol product from our store, our relationship with you is as a data collector.
•Under the EU General Data Protection Regulation (GDPR) this classification is known as a data controller.
Ground Patrol as a data processor
Ground Patrol can also serve as a third-party data processor. This situation occurs when an entity that leverages Ground Patrol’s products and services to deliver their own product or service to their customers.
•Under the EU General Data Protection Regulation (GDPR) this classification is known as a data processor.
•Under the California Consumer Privacy Act (CCPA) this classification is known as a service provider.
What does this mean?
Any individual can make a request to Ground Patrol directly regarding privacy of personally identifiable information (as described in this policy), but it is important to remember Ground Patrol will always respond to such requests in its capacity as a data collector. For various legal, contractual and technical reasons, Ground Patrol cannot respond directly to individuals with regards to personally identifiable information collected in its role as a data processor. Instead, Ground Patrol works with our customers to align with their own privacy programs and practices, and establishes mechanisms for timely response to such requests.
So in summary, if you have a third party relationship with Ground Patrol through another business, you should make your personally identifiable information privacy request through that business’s published channels. Behind the scenes Ground Patrol will be working with them to ensure we do our part to provide relevant information.
Legal basis for collection of personally identifiable information
Ground Patrol collects personally identifiable information only where it has a legal basis to do so. Typically, this is because you’ve expressed an interest in the purchase a Ground Patrol product, service, or event, and therefore we need to ship it to you, provide support, perform other general e-commerce functions, send you registration information, and other service provider functions. Ground Patrol will not intentionally gather information from children under the age of 13.
Types of personally identifiable information collected
Ground Patrol may collect the following types of personally identifiable information:
•General personal information, such as full name, email address, mailing and billing addresses.
•Technical identifiers, such as usernames, device IDs, SIM card ID and IP address.
•Geolocation information, such as GPS coordinates.
•Browser identifiers, such as user agent strings.
How Ground Patrol collects personally identifiable information
There are three ways in which Ground Patrol may collect personally identifiable information:
•Directly, and voluntarily, from you as a consumer of our products and services - through our website, email, text message or phone call.
•Directly, and autonomously, from your browser or device through visits to Ground Patrol website or while using Ground Patrol applications.
•Indirectly, through third party entities, who provide data to Ground Patrol during the course of normal business operations. This typically means Ground Patrol service providers with which Ground Patrol has contracted to deliver a specific function, for example, a payment service provider.
How Ground Patrol uses personally identifiable information
There are two ways in which Ground Patrol uses information collected
•To provide the service or product that you have signed up for. By sending you important information about your account, and performing billing functions.
•To provide additional information about Ground Patrol services, events, new and upcoming products that may be of interest to you.
In both cases listed above, the information is used directly by Ground Patrol, and not accessible to any third parties.
Disclosure of personal information
Ground Patrol does not ‘sell’ personally identifiable data for direct financial benefit. Ground Patrol may share personally identifiable information with its chosen service providers in support of its principal business operations, but all such relationships are governed by contractual agreements with those service providers and are routinely vetted to ensure they meet our strict security and privacy requirements.
In relation to Ground Patrol’s role as a data processor, Ground Patrol will receive and process data on behalf of our customers, before passing the data back to them. Ground Patrol stores only the minimum amount of data required to deliver the service reliably, such as device identifiers and IP addresses, and does not make a habit of storing more data than is absolutely necessary.
Our subprocessors
Particle Industries 325 9th Street, San Fancisco, 94103
Connected World Company LLC 8526 NW NW 110th PL, Doral, Florida 33178
Responding to legal requests for information
Ground Patrol may disclose personally identifiable information as is necessary:
•To comply with a subpoena or court order.
•Cooperate with law enforcement or other government agencies.
•Establish or exercise our legal rights.
•Protect the property or safety of our company and employees, contractors, vendors, suppliers, and customers.
•Defend against legal claims.
•Help with internal and external investigations.
Security of personally identifiable information
Ground Patrol has a dedicated information security team that works to ensure that appropriate safeguards and controls are applied to any data collected by Ground Patrol. The security team has input into all aspects of Ground Patrol’s operations, including the development of hardware and software products, as well as setting company-wide policies and performing operational security monitoring.
When collecting personal information over the Internet via our websites, all transmissions occur via connections encrypted with Transport Layer Security (TLS).
All communication between Ground Patrol hardware devices and the Ground Patrol cloud is encrypted in transit using an appropriately strong, and modern, set of cryptographic ciphers.
The Ground Patrol Device Cloud is hosted in a leading Infrastructure-as-a-Service environment, which is routinely audited against a variety of data security and compliance standards, including SOC II, and ISO 27001.
Payment card data is processed by a third party service provider that has been audited against the Payment Card Industry Data Security Standard (PCI-DSS).
Storage of and transfer of personally identifiable information
All personally identifiable information collected by Ground Patrol is processed and stored in the United States.
Retention of information
Generally speaking, the data collected by Ground Patrol when delivering its services exchanged in real time. The Ground Patrol platform is primarily a conduit for passing that information between Ground Patrol hardware and Ground Patrol customers. Therefore, by design, there isn’t a great deal of ‘retention’ that happens intrinsically.
Retention of certain financial and transactional records associated with Ground Patrol generally happens for financial reporting reasons, or to allow us to identify the owner of a given device to provide support. In these cases, such records are retained for 7 years.
Your rights in regards to personally identifiable information
Ground Patrol extends a common set of rights to everyone in regards to how we leverage personally identifiable information. These rights are as follows:
•Right to access - you can request a copy of your personally identifiable information held by Ground Patrol. Upon appropriately validating your identity, Ground Patrol will submit a copy, in a legible format, of all personally identifiable data collected in the preceding 12 month period within 30 days of receiving the request.
•Right to rectification - in addition to being able to update your Ground Patrol user account directly, you can make a written request to Ground Patrol to update personally identifiable information held about you.
•Right to erasure (or right to be forgotten) - you can request that Ground Patrol erase (‘delete’) personally identifiable elements of data from our systems, and we will do so with consideration for any overriding local, state or federal laws. The most likely outcome of this right is to no longer receive Ground Patrol marketing materials. Ground Patrol does retain the right to remember that we’ve been asked to forget you.
•Right to restrict processing - You have the right to request that Ground Patrol restrict the processing of your personally identifiable information, under certain conditions.
•Right to object to processing - You have the right to object to Ground Patrol processing your information, under certain conditions.
•Right to data portability - you have the right to request that Ground Patrol transfer your data directly to you, or to another entity. Ground Patrol will do so providing we can do so securely.
Making a privacy request
In order to make a request to exercise any of the rights listed above, you must contact Ground Patrol’s privacy team via email to admin@groundpatrol.co.
Ground Patrol will respond to any privacy requests received here within 30 calendar days. Ground Patrol will not disclose, update, or otherwise alter personally identifiable information, unless it can satisfactorily authenticate and identify the subject making the request.
Contacting Ground Patrol:
www.groundpatrol.co
208-731-5489
Notice regarding use of Cookies
Ground Patrol does not use Cookies at this time; however Ground Patrol retains the right to start at any time. If this status changes, you will be notified via email with an updated Privacy Statement.
Module Two (Controller to Processor) will apply where Customer is a controller of customer data and Ground Patrol is a processor of customer data.
Module Three (Processor to Processor) will apply where Customer is a processor of customer data and Ground Patrol is a sub-processor of customer data.
To the extent there is any conflict between the Standard Contractual Clauses and any other terms in this policy, the provisions of the Standard Contractual Clauses will prevail.
Enforcement
With respect to Personal Data received or transferred pursuant to the Data Privacy Framework (DPF), Ground Patrol is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission (FTC). In certain situations, we may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Notice to California Residents
Ground Patrol operates in accordance with the California Consumer Privacy Act (CCPA), and as such, this policy has been designed to incorporate the specific requirements laid out within the CCPA.
We’re committed to protecting the rights of California residents who leverage the Ground Patrol platform, and encourage California residents to contact us to exercise those rights using the mechanism described in the ‘making a privacy request’ section above.
Ground Patrol will not discriminate against individuals who exercise their rights under the CCPA.
Categories of personal information collected
Ground Patrol collects the following categories of information, as defined under the CCPA:
•Identifiers
•Commercial Information
•Geolocation data
•Inferences about personal preferences and attributes drawn from profiling
Do not sell my information
Since Ground Patrol is not involved in the sale of personal information to third parties for financial gain, we do not maintain a separate opt-out page, in accordance with the CCPA.
Authorized Agents
A California customer may use an authorized agent to make a CCPA privacy request on the customer’s behalf. To make a request on behalf of a Ground Patrol customer, the authorized agent must first provide a copy of either (a) a letter signed by the customer authorizing the agent to submit a CCPA request on their behalf, or (b) a valid power of attorney issued pursuant to California Probate Code sections 4000 to 4465. An authorized agent must email one of these documents to admin@groundpatrol.co and include a phone number where the agent may be reached during regular business hours.
Information disclosed for business purposes
Over the preceding 12 months, Ground Patrol has disclosed personally identifiable information to its service providers to support the following business activities:
•Auditing
•Advertising analytics
•Auditing legal and regulatory compliance
•Security
•Debugging
•Identifying and fixing technical errors
•Short-term uses
•Contextual ad customization that does not involve or contribute to profiling
•Performing services
•Account maintenance
•Customer service
•Processing transactions
•Marketing
Updates to this policy
Ground Patrol may update this privacy policy from time to time and is committed to ensuring the latest version of it is publicly available. Please refer to the ‘last updated’ date on the footer of this policy.