1. Scope of this notice

This notice applies to personal information processed through Limitless Technologies websites, portals, dashboards, applications, customer support channels and technology services. Depending on the service and contract, Limitless Technologies may act as a controller or may process information on behalf of a customer acting as the controller.

2. Information we may collect

• Identity and profile details such as name, username, job title, role and organization.
• Contact details such as business email address and telephone number.
• Account, authentication and access-permission information.
• Technical data such as IP address, browser, device, timestamp and session information.
• Security and audit data such as login records, administrative actions and system activity.
• Operational information entered into or generated by the relevant platform.
• Support information contained in tickets, emails and troubleshooting records.
• Cookie and similar technology data required to operate and secure the service.

Some contracted solutions may also process vehicle, parking, access-control, camera, visitor or site-operation data where required for the service.

3. How we use personal information

• Create, administer, authenticate and secure user accounts.
• Provide, operate, maintain and support contracted platforms and services.
• Manage permissions, access levels and customer settings.
• Monitor availability, performance, security events and technical incidents.
• Investigate faults, answer support requests and improve service quality.
• Maintain audit trails and meet contractual, legal and compliance obligations.
• Send operational notices, service updates, security alerts and support responses.
• Protect our systems, customers, users, assets and legal rights.

We do not use personal information for unrelated purposes without an appropriate basis and, where required, additional notice or consent.

4. Legal grounds for processing

• Performance of a contract or steps needed to provide a requested service.
• Compliance with applicable legal or regulatory obligations.
• Legitimate interests in operating, securing, supporting and improving services.
• Consent, where consent is required for a specific purpose.
• Documented instructions from a customer acting as controller.

5. Who we may share information with

• The customer organization responsible for the relevant account or service.
• Authorized Limitless Technologies personnel who require access for their duties.
• Cloud hosting, infrastructure, communications, monitoring, security and support providers.
• Professional advisers, auditors, insurers and compliance service providers.
• Government, regulatory, judicial or law-enforcement authorities where legally required.
• A lawful successor organization in connection with a corporate transaction.

Service providers are expected to process information only for authorized purposes under appropriate confidentiality, security and data-protection terms.

6. International data transfers

Our services may use cloud infrastructure or providers located in different countries. Where personal information is transferred across borders, we use contractual, organizational and technical safeguards appropriate to the transfer and applicable requirements.

7. How long we keep information

We retain personal information only for as long as needed for the purpose for which it was collected, to provide the contracted service, maintain security and audit records, resolve disputes and meet legal, regulatory and contractual requirements.

Retention periods may vary by data type, customer instruction and system configuration. When information is no longer required, it is securely deleted, anonymized or otherwise disposed of under approved retention and disposal procedures.

8. How we protect information

• Role-based and least-privilege access controls.
• Authentication controls and administrative access restrictions.
• Encryption in transit using secure protocols such as HTTPS/TLS.
• Encryption at rest where supported and appropriate.
• Logging, monitoring, backups, vulnerability management and incident response.
• Supplier due diligence and confidentiality obligations.

No system can be guaranteed completely secure, but we maintain safeguards proportionate to the nature and risk of the information processed.

9. Your privacy rights

Subject to applicable law and the role of the relevant controller, you may have the right to request information, access, correction, deletion, restriction, objection, withdrawal of consent where relevant, and to raise a concern with the competent authority.

When Limitless Technologies processes information for a customer, we may refer the request to that customer or assist it in responding.

10. Cookies and similar technologies

Our websites and dashboards may use cookies or similar technologies necessary for authentication, session management, security, preferences, performance and troubleshooting. Where non-essential cookies are used, additional notice or consent may be provided as required.

11. Automated decision-making

Limitless Technologies does not intend to make decisions producing legal or similarly significant effects about individuals solely through automated processing unless specifically required for a service, lawfully authorized and accompanied by appropriate safeguards and notice.

12. Changes to this notice

We may update this notice to reflect changes in services, processing activities, contracts or legal requirements. The effective date at the top identifies the current version.

13. Contact us

For privacy questions, concerns or requests, contact: