Privacy Policy

Last updated: 27 July 2026

Sentria is a security operations platform operated by Nova Herita Ltd (“we”, “us”). This policy explains what personal data the platform processes, why, and the rights of the people it relates to. For most data in Sentria, our customer (the organisation whose site you work at or visit) is the data controller and we act as their processor; for account and website data we are the controller.

What we collect

• Account data — name, email address, role, and authentication records (including optional two-factor enrolment) for platform users.
• Operational records — incident reports, patrol sessions and scans, asset sign-outs, first-aid checks and daily reports, which may include names of staff, guards and other people mentioned in them.
• Contractor data — company and contact details, permit requests, signed permit actions, and uploaded documents such as RAMS and insurance certificates.
• Visitor data — name, company, host, phone and vehicle registration recorded at self-service kiosks.
• Technical data — essential cookies used for sign-in and security. We do not use advertising or analytics cookies.

Why we process it

To provide the service (contract), to keep sites safe and meet health & safety obligations (legal obligation and legitimate interests of our customers), and to secure the platform itself (legitimate interests). Audit trails — for example signed permit actions — are kept because health & safety law and insurance require a reliable record.

Who processes it for us

• Supabase — database, authentication and file storage.
• Vercel — application hosting.
• Resend — transactional email (a US-based provider; emails and recipient addresses transit their systems).

We do not sell personal data or share it with advertisers.

How long we keep it

Account data is kept while an account is active. Operational, contractor and visitor records are retained according to the controlling organisation’s retention policy and applicable health & safety record-keeping requirements, then deleted.

Your rights

You may have the right to access, correct, export or erase personal data about you, and to object to or restrict processing. If your data was collected on behalf of one of our customers (for example as a contractor or visitor), we may refer your request to them as the controller. To exercise any right, contact enquire@novaherita.com. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).

Contact

Nova Herita Ltd · enquire@novaherita.com

We may update this policy from time to time; material changes will be noted on this page.