Privacy Policy

This Privacy Policy explains how LogiNestForge ("we", "us") collects and uses personal data through this website and the platform services we run behind it: Utility Work X licensing, the Academy training library, the AI training programme and the shared RTK network. It applies under the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and the Data (Use and Access) Act 2025.

If you use the Utility Work X application itself, the Utility Work X Privacy Policy also applies.

1. Our role

• We are the controller for this website, contact enquiries, our admin accounts, customer licence records, and the AI training dataset described in section 4.
• We act as a processor for Utility Work X customer organisations when we run services on their behalf, such as photo analysis and licence checks for their users.

2. Data we collect

• Enquiries: name, email, phone, company and your message when you use a contact or demo form.
• Admin and staff accounts: email, hashed password, role, login times, failed login attempts and an audit trail of actions.
• Customer licence records: the customer organisation's name, the contact details of its administrators, its licensed features and its choices about AI training and the shared RTK network, including who made each choice and when.
• AI training data: site photographs and their labels from customers that have opted in (section 4). Photographs of work sites may show people, vehicles and registration plates.
• RTK base stations: the device identifier, owning organisation and the precise position of each registered base station.
• Academy: training content and media we publish, and records of who uploaded or changed it.
• Website usage: pages viewed, device and browser information, approximate location, and (with Microsoft Clarity) how you scroll and click, collected only if you accept analytics cookies.

3. How we use it and our lawful bases

• Responding to enquiries: legitimate interests, or steps before a contract at your request.
• Providing and licensing our services to customer organisations: performance of our contract with them.
• Security, fraud prevention, login throttling and audit logs: legitimate interests in keeping the services and the data in them safe.
• Training and improving AI models from opted-in photographs: legitimate interests, only after the customer organisation has opted in (section 4).
• Website analytics: your consent, which you can withdraw at any time using Cookie settings in the footer.
• Accounting and statutory records: legal obligation.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. AI training programme ("Help build a better model")

Utility Work X can check site photographs automatically. If an administrator of a customer organisation opts in, photographs from that organisation that reviewers have approved, and their labels, are copied into a training dataset that we hold. We use it to train and test models that we then offer to all Utility Work X customers.

• The organisation can opt out at any time; new photographs stop being added straight away.
• On request we remove that organisation's photographs from the dataset. Models already trained with them cannot be un-trained, but they are not used to train new models.
• Training runs on our own equipment and on Microsoft Azure OpenAI. The dataset is stored in private storage and is not sold or shared with other customers.

5. Who we share data with

We do not sell personal data. We use these service providers:

• Vercel: website hosting and file storage (Vercel Blob)
• Our database host: stores accounts, licence records and enquiries
• Railway: hosts the Utility Work X services we operate
• Microsoft (Azure OpenAI) and OpenAI: photo analysis and model training
• Our email provider (SMTP): sends and receives enquiry emails
• Google (Analytics 4) and Microsoft (Clarity): website analytics, only with your consent

We may also share data with professional advisers under confidentiality, or where the law requires it.

6. International transfers

Some of these providers are based in, or process data in, the United States. Where data leaves the UK we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework for certified companies) or the UK International Data Transfer Agreement or Addendum.

7. Retention

• Contact and demo enquiries: deleted automatically 24 months after we receive them, unless they become part of an active engagement.
• Failed-login records: 90 days.
• Admin accounts and audit logs: the life of the account plus seven years.
• Customer licence records: the life of the customer relationship plus seven years.
• AI training dataset: until the contributing organisation asks for removal, or the dataset is retired.
• Analytics: no longer than 14 months in the analytics providers.

8. Your rights

You have the right to access, correct, erase, restrict, port or object to our processing of your personal data, and to withdraw consent where we rely on it. To exercise any right, email Support@Loginestforge.uk. We respond within one month and carry out reasonable and proportionate searches. Complex requests can take up to three months more; if so, we tell you why.

Complaints. Please complain to us first at the address above. We acknowledge complaints within 30 days and tell you the outcome without undue delay. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

9. Cookies

We use strictly necessary cookies to run the site and, only with your consent, analytics cookies. See our Cookie Policy for the full list, and use Cookie settings in the footer to change your choice.

10. Security

We protect data with encryption in transit, bcrypt password hashing, throttling of repeated failed logins, role-based access controls, per-customer API keys stored only as hashes, private file storage with short-lived signed links, and audit logging of administrative actions.

11. Children

Our website and services are for businesses and are not directed at children.

12. Changes

We update this policy whenever we start using personal data in a new way and change the "last updated" date above. Material changes are communicated where we have a direct relationship with you.

13. Contact

Privacy questions or requests should be sent to Support@Loginestforge.uk.