Privacy Notice

1. Who we are

Bellamy is a personal safety platform that connects people to SIA-licensed security providers — helping them record safety incidents, request patrol or escort assistance, and understand safety conditions in their area.

2. What data we collect

2.1 Information you provide

We collect information you choose to submit, including:

• Safety reports (text, voice notes, photos, or videos)
• Notes or descriptions you attach to reports
• Requests for patrol, escort, or assistance services
• Account information (such as email address or username)

Reports may include contextual information about safety incidents. These reports are treated as unverified user submissions.

2.2 Location data

Location data is used differently depending on how you use Bellamy:

Free users:

Location is captured only at the time you create a report or request assistance.

Subscribed users:

Live or periodic location tracking may be enabled to support patrol routing, coverage visibility, and active safety assistance.

Patrollers:

Location data is used for dispatch, oversight, and service delivery.

Location tracking is purpose-limited and not used for advertising.

2.3 Automatically collected data

We also collect limited technical data, such as:

• timestamps,
• device or app metadata,
• access and audit logs.

This data helps us keep the platform secure and reliable.

2.4 Identity verification and age checks

If you request patrol, escort, or private security services, we may ask you to verify your identity. This helps us keep users safe and prevent misuse of the service. This may include:

• your date of birth (to confirm you are 18 or over);
• limited identity document information for verification;
• a profile photo so patrollers can recognise you when responding to a request.

Your identity documents are used only for verification and are not shared with patrollers. Patrollers may see your profile photo and live location during an active request so they can assist you effectively.

We do not use identity information for advertising, profiling, or law enforcement purposes. You can request access to or deletion of your personal data at any time, subject to legal requirements.

3. How we use your data

We use personal data only where necessary to operate Bellamy safely and responsibly. Core purposes include:

• allowing you to create and retain personal safety reports;
• providing patrol, escort, or private security services you request;
• showing anonymised safety reports on a public map for community awareness;
• displaying patrol presence and coverage areas;
• improving safety coverage and routing using aggregated and anonymised analytics;
• maintaining platform security, auditability, and misuse prevention;
• complying with legal obligations.

Bellamy does not determine criminal liability, label suspects, or verify reports as evidence.

4. Anonymised public reports

Some safety reports are published in an anonymised form, meaning:

• names, account details, and direct identifiers are removed;
• reports cannot reasonably be linked back to you;
• only general location and incident type information is shown.

Once data is anonymised, it is no longer personal data under data protection law.

5. Legal bases for processing

We rely on the following lawful bases under UK GDPR:

• Legitimate interests — to operate a personal safety platform, publish anonymised safety information, and improve coverage and routing.
• Contractual necessity — where you request paid patrol or security services.
• Legal obligation — where we must disclose information by law (for example, a valid court order).

You can object to processing based on legitimate interests (see Section 9).

6. Who we share data with

We only share personal data where necessary, including with:

• patrollers or security providers during an active request you initiate;
• partner organisations responsible for sites or areas you request assistance in;
• service providers who host or support our systems (under contract);
• law enforcement or authorities only where legally required.

We do not sell personal data.

7. How long we keep data

We keep personal data only for as long as necessary for safety, legal, and operational purposes. In summary:

• You can delete your reports at any time.
• Deleted reports are removed from your account and operational use.
• We may retain minimal audit records, and/or irreversibly anonymised and aggregated data.

Retention periods are defined internally and reviewed regularly.

8. Your rights

You have the right to:

• access your personal data;
• correct inaccurate information;
• delete your data;
• restrict or object to certain processing;
• receive a copy of your data.

These rights apply regardless of whether you are a free or paid user. Requests can be made by contactingprivacy@vigil.app. We respond within one month.

9. Objections and choices

You can object to processing based on legitimate interests. If you object, we will stop processing unless we have compelling reasons to continue.

You can also control what you submit and when you share location data.

10. Security

We use technical and organisational measures to protect personal data, including:

• role-based access controls,
• encryption,
• audit logging,
• restricted internal access.

Access to reports and location data is limited to authorised roles and logged.

11. Changes to this notice

We may update this notice as Bellamy evolves. If changes materially affect how your data is used, we will make this clear.