1. Scope and who we are
SafeSpot provides smart locker technology and related solutions for residential communities, delivery and pickup, workplaces, gyms, educational institutions, retail, recreation and other business environments. Offerings may include hardware, embedded software, applications, cloud-hosted or locally deployed systems, standalone offline lockers, integrations and related support. This Policy describes how personal data may be handled through our website and through solutions for which SafeSpot determines the purposes and means of processing. An organisation that purchases or operates a SafeSpot solution may separately determine how user data is collected and used; its own privacy notice may apply.
2. Information that may be collected
Depending on the application and configuration, the relevant information may include: (a) business enquiries, names, phone numbers, email addresses, organisation details and correspondence; (b) user or administrator identifiers, access permissions, authentication events, locker assignments, deliveries, collections, returns and audit logs; (c) device information, IP addresses, operating-system details, diagnostic and security logs; (d) payment status and transaction references where payment processing is enabled; and (e) authentication data, such as PIN/OTP/QR/RFID identifiers or biometric information where a customer elects to enable those features. The handling of fingerprint or facial-recognition data, if enabled, depends on the specific solution and agreement. This Policy should not be read as a statement that SafeSpot collects or centrally stores all these categories in every deployment.
3. How information is obtained
Information may be provided directly by you, your employer, housing association, facility operator or another customer; generated when a locker or application is used; or received from integration, communications, hosting, authentication or payment service providers where the applicable configuration requires it.
4. Purposes of processing
Where applicable, personal data is used to respond to enquiries; design, supply, configure, maintain and support locker solutions; enable authorised access and locker workflows; operate or integrate software and APIs; maintain audit trails; investigate faults and security incidents; communicate operational notices; meet contractual and legal obligations; and protect systems from misuse. Marketing communications, where any are sent, will be handled subject to applicable consent and legal requirements.
5. Business customer and SafeSpot responsibilities
For business-operated deployments, the customer or facility operator may act as the data fiduciary or otherwise determine the purposes and means of processing, while SafeSpot may act as a service provider or data processor under written instructions. The precise roles, hosting location, categories of information and retention periods depend on the deployment and customer agreement. Users should contact the relevant facility operator first for matters it controls. SafeSpot will assist customers as agreed and as required by applicable law. In some cases, such as enquiries made directly to SafeSpot, we independently determine the processing purposes.
6. Authentication and biometric features
Available access methods may include PIN, OTP, QR code, RFID, mobile applications, fingerprints and facial recognition. Not every method is enabled in every installation. Where biometric authentication is used, the customer-selected solution should include appropriate notices, permissions, safeguards and access controls. The responsible operator must establish a lawful basis for collecting and using biometric information. Specific implementation, storage and deletion arrangements should be confirmed in the project documentation.
7. CCTV and physical-site surveillance
CCTV or other surveillance at a locker location, if present, may be provided or controlled by the facility operator or a third party. SafeSpot does not assume that every locker deployment includes CCTV, or that SafeSpot controls cameras at every site. For information about local surveillance, please consult the facility operator's applicable notices.
8. Sharing and service providers
Information may be shared with authorised customer administrators, service technicians, hosting and communications providers, integrations, payment partners where applicable, professional advisers and public authorities where legally required. We do not sell personal data to advertisers. Access and sharing should be limited to the purposes and permissions relevant to the particular deployment.
9. Cloud, local and offline deployments
SafeSpot supports cloud-hosted, customer-hosted or locally deployed, and standalone offline configurations. The location, availability and extent of data processing differ between these models. In offline configurations, personal data may remain within local equipment, subject to its specific design. A cloud-hosted deployment may use hosting or other technical vendors. Details applicable to a particular customer are set out in the relevant technical and contractual documentation.
10. Payments, cookies and third-party services
Some deployments may involve payments processed by external providers. Where used, those providers govern payment processing under their own terms and privacy notices; SafeSpot need not receive full card credentials. Our website or connected applications may use essential cookies and, where enabled, analytics tools. Browser settings may allow you to restrict cookies, although doing so may affect some features. Links to third-party sites and integrations are governed by the respective providers' notices.
11. Retention and security
Retention periods depend on the purpose of processing, the customer's instructions, applicable law, and the deployment configuration. We seek to apply proportionate technical and organisational safeguards, including appropriately restricted access and security controls. No system can be guaranteed entirely secure. Information is deleted, anonymised or returned as required by applicable agreements and law; specific periods should not be assumed unless confirmed in the relevant notice or contract.
12. Your rights and choices
Subject to applicable law, you may request information about personal data, seek correction or erasure, withdraw consent where processing depends on consent, and raise a grievance. We may need to verify your identity and determine whether the request should be handled by SafeSpot or by the customer operating the relevant locker installation. Withdrawing consent may affect features that require it, but does not automatically invalidate prior lawful processing.
13. Children and shared facilities
Some locker solutions may be installed at schools, family venues or other places accessed by children. Responsibility for age-appropriate notices, parental permissions and lawful processing depends on the relevant operator and service configuration. SafeSpot solutions should be used under applicable site rules and legal requirements.
14. Updates to this Policy
We may update this Policy to reflect changes in our offerings, operational practices or applicable law. The current version and revision date will be displayed on this page. Changes do not replace notices or approvals required by applicable law.
15. Contact and grievances
For questions about SafeSpot's processing, to raise a grievance, or to identify the appropriate contact for a specific deployment, call or WhatsApp +91 98863 34262. Website: www.safespot.in. Where a business customer operates the deployment, you may also need to contact that operator.