Privacy Policy

1. Introduction

This Privacy Policy explains how Oberon Project & Safety Services Ltd (“OPSS”, “we”, “us”) collects, uses, and protects your personal data when you use the Oberon EHS App.

We fully comply with key global and national standards, including:

• UK GDPR
• EU GDPR (where applicable)
• UK Data Protection Act 2018

2. Data Controller

3. Personal Data We Collect

We may collect the following categories of data in order to serve you:

4. How We Collect Data

We collect information directly from you, automatically through your interactions with the App, and from trusted third-party providers including:

• Google Firebase
• Google AdMob
• OpenAI

5. Legal Basis for Processing

We process data on the following legal bases:

• Contract (Art. 6(1)(b) GDPR): To provide core app functionality and services you request.
• Legitimate Interests (Art. 6(1)(f) GDPR): To improve app performance, stability, and maintain application security.
• Consent (Art. 6(1)(a) GDPR): For personalized advertising, push notifications, and processing special category data.
• Legal Obligation (Art. 6(1)(c) GDPR): Where required to comply with statutory and legal requirements.

6. Special Category Data

Some uploaded content (e.g., incident photos or descriptions) may reveal health-related or sensitive information. We process special category data ONLY with your explicit consent, or where absolutely required for workplace safety documentation and statutory reporting under applicable law.

7. Advertising & Consent

We use Google AdMob to display advertisements. For users in the UK/EEA:

• We use Google’s User Messaging Platform (UMP) to obtain consent for personalized ads.
• You may modify or withdraw your advertising consent at any time within the App settings.

We do not sell personal data.

8. International Data Transfers

Some service providers (e.g., Google, OpenAI) process data outside the UK/EEA. Transfers are fully safeguarded using Standard Contractual Clauses (SCCs), UK adequacy regulations, or equivalent lawful safeguards.

9. Data Retention

We retain your information only as long as necessary:

• Account data: Retained until your account is deleted.
• Incident and assessment data: Up to 6 years or until manually deleted.
• Photos/videos: Retained with their associated safety record.
• Analytics data: Up to 26 months.

10. Account & Data Deletion

You may delete your account and associated personal data at any time:

• Through the in-app settings (Settings → “Delete Account”)
• Or by sending an email request to info@oberonpss.com

Upon request, your personal data will be permanently removed within 30 days, except where a longer retention period is legally required. This strictly complies with Google Play account deletion guidelines.

11. Your Rights

Under UK and EU GDPR, you have the right to access, rectify, request erasure, restrict or object to processing, data portability, and consent withdrawal.

To exercise these rights, please contact us at info@oberonpss.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local EU supervisory authority.

12. Security

We implement industry-standard security measures including end-to-end encryption in transit, strict access controls, secure cloud infrastructure, and periodic security reviews. While we make every effort to safeguard your information, no digital system can be guaranteed 100% secure.

13. Children

The App is not intended for children under the age of 16. We do not knowingly collect personal data from anyone under 16.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated to you in-app or via email.