Last updated: 22 September 2026
This is a first draft pending solicitor review. Placeholders below (registered address, company number, retention period, analytics providers) still need real answers before this is final. See docs/legal-drafts/privacy-policy.md in this repo for the full drafting notes.
This policy explains how GuardOn collects, uses and protects your personal data when you use guardon.io, buy or use a GuardOn product, or interact with our app.
1. Who we are
GuardOn is operated by Traknova Ltd ("GuardOn", "we", "us", "our"), registered in England and Wales.
For any privacy question, contact us at info@guardon.io.
2. What we collect
Information you give us directly:
- Name, email, phone number, billing and delivery address, and vehicle details (make, model, year, registration) when you buy a product, book an installation, or use the compatibility checker.
- Payment details are collected and processed by Stripe, our payment provider. We do not store your full card details ourselves.
- Anything you send us directly, such as support requests or enquiries.
Information your device generates once installed:
- Location data, trip history, and device status (battery, connectivity, tamper alerts) from your tracker or Ghost Immobiliser, for as long as your subscription is active.
Information collected automatically:
- Standard web usage data when you visit guardon.io: IP address, browser type, pages viewed, referring site, and similar, via cookies and analytics tools (see § 6).
We do not knowingly collect information from anyone under 18. GuardOn's products and services are for vehicle owners, and our terms require account holders to be 18 or over.
3. Why we process your data, and our lawful basis
| We use your data to... | Lawful basis |
|---|---|
| Take your order, arrange installation, and provide the subscription service (tracking, alerts, app access, support) | Performance of a contract |
| Provide real-time location and security alerts through the app | Performance of a contract |
| Send you service messages (order confirmation, install scheduling, renewal notices) | Performance of a contract / legitimate interest |
| Send you marketing emails (offers, product updates, content) | Consent, you can opt out at any time (see § 8) |
| Detect and prevent fraud, and keep our systems secure | Legitimate interest |
| Comply with our legal and tax obligations | Legal obligation |
4. Who we share it with
We share data only where necessary to run the service:
- Stripe for payment processing.
- Brevo for email marketing and transactional/automated emails (order updates, review requests, lifecycle messages).
- Vercel for website hosting and infrastructure.
- Installation partners/technicians, who receive your name, address, phone number and vehicle details solely to carry out your booked installation.
- Traknova, GuardOn's parent company. Where you interact with fleet, dealership or lender-facing services, relevant enquiry data may be shared with the Traknova sales team.
- Law enforcement or regulators, where we're legally required to.
We do not sell your personal data to third parties.
5. How long we keep it
We keep account and order data for as long as your account is active, plus a period afterwards to meet our legal, accounting and tax obligations (typically up to 6 years for financial records). Location and trip data from your device is retained for [RETENTION PERIOD] and is deleted or anonymised after your subscription ends, except where we need to keep it for a legal or safety reason, such as an active theft investigation.
6. Cookies
guardon.io uses cookies for:
- Essential: checkout, cart, and basic site functionality. These can't be switched off.
- Analytics: understanding site usage (see § 7).
- Marketing: if you arrive via an ad campaign, a small set of cookies help us measure whether it worked.
You can control cookies through your browser settings. Blocking essential cookies may stop checkout from working.
7. Analytics and advertising
GuardOn's analytics setup is being rolled out gradually. This section will name each analytics or advertising provider we actually use (for example Google Analytics) and link to their own privacy policy, once they're live.
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Ask us to delete your data (the "right to be forgotten"), subject to our legal retention obligations
- Object to or restrict certain processing
- Data portability
- Withdraw consent to marketing at any time. Every marketing email has an unsubscribe link, or you can email info@guardon.io
To exercise any of these rights, contact info@guardon.io. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've handled your data incorrectly.
9. Security
We use technical and organisational measures appropriate to the sensitivity of the data we hold, including encrypted connections, access controls, and secure payment processing via Stripe. No method of transmission or storage is 100% secure, and we can't guarantee absolute security, but we take reasonable steps to protect your data and will notify you and the ICO of any breach where we're legally required to.
10. International transfers
Some of our service providers may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or adequacy regulations.
11. Changes to this policy
We may update this policy from time to time. Material changes will be notified by email or a prominent notice on guardon.io. The "Last updated" date at the top shows when it last changed.
12. Contact us
Email: info@guardon.io