Privacy Policy

LK1 Limited is registered in England and Wales (company number 16562549), registered office Office 3 Grg House, Cobden Street, Salford, England, M6 6NA.

For anything about your personal data, contact us at help@reccenet.com.

• For organisations using a Team Pack, the organisation decides what its people record — recces, clients, medical plans, movements, messages and so on. The organisation is the controller of that data and we are its processor: we handle it only on its instructions, under our Data Processing Addendum. If you are a member of an organisation’s workspace, its own privacy notice also applies, and it should be your first contact for requests about that data.
• For individuals on an Individual Pack, you decide what you record, and you are responsible for the personal data of others that you put in. We process that data on your behalf in the same way.
• We are the controller of data we use for our own purposes: your account, billing, security, support, service emails, usage needed to run and improve Recce Net, and our website and waiting list.

We do not use advertising trackers or analytics cookies, and we do not sell personal data.

Where we rely on legitimate interests, we have weighed them against your rights and expectations. You can ask us about that assessment. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

When you use AI features, such as risk scoring, photo analysis, voice-note structuring, report drafting, briefs, route analysis and intelligence summaries, the content needed for that task is sent to our AI provider, OpenAI, through its business API. Under OpenAI’s API terms, that content is not used to train its models, and it is kept by OpenAI only for a short period for abuse monitoring. AI outputs are suggestions for a person to check; they are not used to make automated decisions about you.

Our main database and file storage are hosted in the United Kingdom (Amazon Web Services, London, through our database provider Supabase). Some providers, such as those for web hosting, email, payments, maps, notifications and AI, may process data in the United States or elsewhere. Where personal data leaves the UK, we rely on UK adequacy regulations (including the UK–US data bridge where the provider is certified), or on the ICO’s International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

• All connections are encrypted in transit, and data is encrypted at rest.
• Each workspace’s data is separated from every other workspace by database access rules, which we test automatically.
• Team messages are end-to-end encrypted. Medical profiles are encrypted with a workspace-specific key.
• Files such as photos and documents are kept in private storage and opened through short-lived, signed links.
• Accounts can use multi-factor authentication, and sensitive actions can require it again. Suspended people are signed out everywhere.
• Important actions are recorded in a tamper-evident audit log.

More detail is on our Security & Disclosure page. If a personal data breach is likely to put you at risk, we will tell you, and the ICO where required, without undue delay.

Under the UK GDPR you can ask us to:

• give you a copy of your personal data (you can also download your own data from Account in the console);
• correct data that is wrong or incomplete;
• erase your data;
• restrict how we use it, or object to our use based on legitimate interests;
• give you your data in a portable format;
• stop using it for product news (every email has an unsubscribe link).

Where we rely on consent, you can withdraw it at any time. Email help@reccenet.com. We reply within one month. Where the data belongs to an organisation’s workspace, we will pass your request to that organisation and help it respond.

You can ask to delete your account in the app (Profile → Delete account), in the console (Account), or by emailing us. Your personal details are erased after 30 days; sign in before then if you change your mind. Work you created for a team stays with that team, credited to “Erased user”. Full details are on our Account Deletion page.

• Recce Net is for adults working in security. It is not intended for anyone under 18, and we do not knowingly collect their data.
• We only send product news to people who have agreed to receive it, or to business contacts where the law allows. You can unsubscribe at any time.
• We use only strictly necessary cookies. See our Cookie Policy.

We will update this policy when our practices change and show the date at the top. For significant changes we will tell you in the Service or by email.

If you have a concern, please contact us first at help@reccenet.com. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.