Privacy policy

Who is responsible for the information?

The PestLove service operator determines how it processes account registration, platform security, support and subscription information. For operational content entered by a customer organization, that organization ordinarily determines the purposes and instructions; the platform processes that content in order to provide the contracted service.

The applicable controller–processor relationship and any required data-processing agreement must be agreed with each contracting organization. Organizations are responsible for choosing lawful purposes, assigning access and informing the people whose data they enter.

Information processed

Depending on how you use PestLove, information can include identity and login details, organization and billing contacts, customers and facilities, scheduled work, inspections, readings, photographs, signatures, food-safety records, laboratory samples, reports, communications and support requests.

Technical data can include the IP address used to access the service, device and session information, security events and audit logs needed to protect accounts and diagnose operational problems.

Purposes and legal grounds

Account and service information supports registration, access control, operational workflows, customer support, payment administration, fraud prevention and security. Depending on the activity and relationship, processing may be necessary for a contract, for legal obligations or for legitimate interests such as preventing misuse and maintaining service reliability.

Where the law requires consent for an optional purpose, that purpose should not operate before the required consent has been obtained. Marketing and non-essential tracking must be assessed separately from functionality needed to provide the service.

Access, collaboration and service providers

Organization data is isolated by tenant and available only to users with applicable permissions and to organizations explicitly authorized to collaborate on particular facilities. Invited customers receive only the portal access granted to them.

The platform may use infrastructure, communications and payment providers to deliver the service. Actual providers, contractual safeguards and cross-border transfers must be documented for the deployed operating environment; a processor must not be treated as having unrestricted rights over the data.

Security and accountability

PestLove uses role-based access and tenant boundaries, authenticated sessions, authorization checks and operational audit records. Organizations control whom they invite and the permissions they assign.

No online system eliminates every risk. Users should protect access credentials, enable available security features and report suspected unauthorized access without delay.

Retention and export

Information is kept for periods justified by its purpose, operational needs, contractual instructions and applicable legal requirements. Some financial and security records may need to remain available after a subscription ends.

The platform supports export of organizational information and a read-only mode after certain billing states. Deletion, backup expiry and statutory retention must follow the actual service agreement and documented retention schedule.

Your rights and requests

Where applicable under data-protection law, individuals may request access, correction, deletion, restriction, portability or an objection to processing. They may also complain to the competent supervisory authority. Some rights depend on the processing purpose and legal basis.

For operational data controlled by a customer organization, contact that organization first. For service-account and platform matters, use the verified contact details of the service operator supplied in this policy.