Smartix Privacy Policy

Last Updated: 20th October 2025

1. Introduction

Welcome to Smartix (“we,” “our,” “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit our website www.smartix.uk or use our SaaS platform (“Service”). By using our Service, you agree to the terms of this Privacy Policy.

2. Information We Collect

We collect the following types of personal information:

Account Information: Your name and email address when you create an

account. • We may also collect company name, registration number and further contact details.• Payment Information: Payment details are processed securely by our third party provider, Stripe. We do not store or access your full payment information.

Cookies and Usage Data: We use cookies to maintain your login session and

to analyse basic website usage.

3. How We Collect Information

We collect data through:

Signup forms you complete when creating an account or subscribing.
Cookies used to authenticate users.
Payment processing via Stripe when you make a purchase or subscription.

4. How We Use Your Information

We use your information to:

Process payments and subscriptions via Stripe. • Communicate important updates, security notices, or support messages.
Provide, maintain, and improve our Service.
Manage your account and authentication.
Comply with legal obligations.

We process your personal data under the following lawful bases:

Contractual necessity: To provide our Service to you. • Legal obligation: To comply with applicable laws. • Legitimate interests: To improve our Service and maintain security.

We share limited data only when necessary: Stripe – for payment processing (we share your email address and relevant payment details). We do not sell or rent personal data to third parties.

7. International Data Transfers

We hold all data within our AWS VPC based in Ireland. Pass data is sent to devices via Apple and Google services which are based outside of the UK.

8. Data Retention

We retain your data only as long as necessary for the purposes stated above, or as required by law. You can request deletion of your account and data at any time (see Section 10).

9. Cookies

We use cookies for:

Analytics to understand usage and improve performance.
Essential functionality (e.g., keeping you logged in).

10.Your Rights

Under the UK GDPR, you have the right to:

Access your personal data.
Request correction or deletion of your data.
Object to or restrict processing.
Request data portability.
Withdraw consent at any time (where processing is based on consent). To exercise your rights, contact us www.smartix.uk/contact

11.Data Security

We use appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. However, no online service is 100% secure, and we cannot guarantee absolute security. We encrypt all potentially sensitive data including individual pass data, notifications and messages sent to passes as well out system logs using AWS KMS with a 12 month rolling key. You may choose to opt some data out of encryption in order to have that data searchable. You can do this on a per pass template basis.

12.Children’s Privacy

Our Service is not directed to individuals under 16. We do not knowingly collect data from minors.

13.Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with the “Last updated” date revised accordingly.

14.Contact Us

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us www.smartix.uk/contact