Skip to content

Privacy Policy

Last updated:

Ecodetect Ltd ("the Company," "we," "us," or "our") builds AI computer-vision software that analyses ROV footage of offshore infrastructure to detect corrosion, structural damage, marine growth, and cathodic protection anomalies, and drafts compliance-ready inspection reports for offshore wind and marine infrastructure operators. This Privacy Policy explains how we process personal data in connection with our platform at inecodetect.com and our related services.

This policy is governed by the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Ecodetect Ltd ("the Company") (Ocean Way, Ocean Village Innovation Centre, Southampton SO14 3JZ, United Kingdom) is the data controller for personal data processed through inecodetect.com under the UK GDPR and the Data Protection Act 2018. You can contact us at [email protected].

2. Personal Data We Process

The personal data we process falls into the following categories, determined by how you interact with our platform and services:

  • Identity and contact data -- name, work email address, phone number, employer organisation, and job title, collected when you submit a demo or contact request, or when you create a platform account;
  • ROV footage and inspection project data -- footage files, associated survey metadata (vessel name, survey date, GPS coordinates, water depth), and anomaly inventory records that operator users upload to the platform for processing. This data is processed solely to generate inspection analysis outputs and compliance report drafts. We do not use uploaded footage or derived inspection data to train machine learning models without explicit written agreement;
  • Communications content -- the content of emails and messages you send to us via the contact form or directly to our support address;
  • Technical and usage data -- IP address, browser type and version, device type, pages visited, session duration, and referral source, collected automatically when you use inecodetect.com;
  • Analytics data -- aggregated behavioural data about how visitors navigate the site and platform, collected only with your prior consent under our cookie policy.

3. Lawful Bases (Article 6 UK GDPR)

We rely on the following lawful bases for processing:

  • Pre-contractual steps / contract performance -- to respond to demo requests, set up accounts, and provide the inspection analysis service you have engaged us to perform;
  • Legitimate interests -- to operate and improve the platform, to protect the security and integrity of our systems, and to manage direct business relationships with offshore operator clients. Our legitimate interests do not override your rights where those interests are not compelling;
  • Legal obligation -- to comply with applicable UK law, including record-keeping obligations;
  • Consent -- for non-essential cookies and analytics, and for any direct marketing communications we send. You may withdraw consent at any time.

4. Recipients and International Transfers

We share personal data only with processors who provide services necessary to operate the platform -- including cloud infrastructure, customer communication, and analytics tools -- under Article 28 UK GDPR contracts. We do not sell personal data to third parties.

Where we transfer personal data to processors outside the United Kingdom, those transfers are protected by the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or an adequacy regulation made under the Data Protection Act 2018, as applicable to the specific transfer.

5. Retention

We retain personal data only as long as necessary for the purpose for which it was collected. Our standard retention periods are:

  • Inquiry and demo request data: 24 months from last contact, after which it is deleted;
  • Platform account and project data (including uploaded footage and derived inspection records): retained for the duration of the active service agreement, then deleted within 90 days of account closure unless a longer period is required by law or agreed in writing with the operator client;
  • Web server and access logs: 90 days;
  • Consent records: 5 years from the date of consent, to demonstrate regulatory compliance.

Offshore wind operators have obligations under UK Maritime and Coastguard Agency, HSE Offshore Division, and OSPAR frameworks that may require them to retain their own inspection records independently of our retention schedule. Operators remain responsible for their own regulatory recordkeeping obligations.

6. Your UK GDPR Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to personal data we hold about you:

  • Right of access -- to receive a copy of your personal data and information about how it is processed;
  • Right to rectification -- to have inaccurate personal data corrected without undue delay;
  • Right to erasure -- to have personal data deleted where it is no longer necessary, where you withdraw consent, or where no other lawful basis applies;
  • Right to restriction of processing -- to limit how we use your data in certain circumstances;
  • Right to data portability -- to receive personal data you provided to us in a structured, commonly used, machine-readable format;
  • Right to object -- to processing based on legitimate interests; we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. Your right to object to direct marketing is absolute and requires no justification;
  • Rights related to automated decision-making -- we do not make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

To exercise any of these rights, email [email protected] with a clear description of your request. We will respond within one calendar month of receipt. For complex or numerous requests, we may extend this period by a further two months, and we will notify you of the extension within the initial one-month period.

7. Right to Complain to the ICO

If you consider that our processing of your personal data infringes the UK GDPR, you have the right to lodge a complaint with the UK Information Commissioner's Office ("ICO"). The ICO's website is ico.org.uk; their helpline number is 0303 123 1113. We would welcome the opportunity to address your concern directly before you approach the ICO.

8. Cookies

inecodetect.com uses cookies and similar technologies. Non-essential cookies -- including analytics cookies -- are not set until you give prior consent through our cookie banner, in accordance with the Privacy and Electronic Communications Regulations (PECR). See our Cookie Policy for full details of the cookies we use and how to manage your preferences.

9. Security and Changes

We implement technical and organisational measures appropriate to the risk of processing, including access controls, encrypted data transmission, and regular security review. Because our platform processes offshore inspection footage that may relate to critical infrastructure, we treat data security as a core operational responsibility, not an afterthought.

We will update this policy when our processing activities change. Material changes will be reflected by a new "Last updated" date. Where changes affect your rights significantly, we will notify active platform users directly.

10. Contact

Ecodetect Ltd
Ocean Way, Ocean Village Innovation Centre
Southampton SO14 3JZ
United Kingdom
Email: [email protected]
Phone: +44 23 8000 4200