Privacy Policy

ScanHaz ("we", "us", "our") is the data controller for personal data collected through this platform. For data protection queries, contact us at hello@scanhaz.ie.

We may collect the following personal data:

• Account data: name, email address, password (hashed)
• Payment data: billing details processed via Stripe (we do not store card numbers)
• Usage data: scan history, reports generated, features accessed
• Affiliate data: referral codes, clicks, conversion events, commission records
• Technical data: IP address, browser type, device, cookies, session data
• Communications: support messages, emails

We process your data for the following purposes and legal bases:

We use cookies and similar tracking technologies for:

• Affiliate referral tracking — to attribute sign-ups to the correct affiliate
• Session management — to keep you logged in
• Analytics — to understand how the platform is used

You may disable cookies in your browser settings. Please note that disabling cookies may prevent referral tracking from functioning correctly.

Public ScanHaz pages may record limited, pseudonymous analytics events to understand whether visitors explored a product page, viewed an example, requested contact, or started a walkthrough. These event records contain an ephemeral session ID, event name, page path, referring hostname where available, and campaign parameters. We do not attach uploaded photographs, names, email addresses or AI safety findings to those events. Our first-party event ID is held in page memory and does not require an additional analytics cookie.

Server-side abuse prevention may temporarily process IP information for rate limiting. Enquiry messages are stored separately with the contact details that you choose to submit. You may contact us with privacy questions or data requests using the address above.

We may use third-party service providers to operate the platform. The exact providers and data-transfer arrangements should reflect the deployed production configuration and applicable contracts.

• Payment provider — payment processing when paid billing is enabled
• Application infrastructure provider — application hosting, storage, and database services
• AI/model providers — analysis of content submitted for AI-assisted features

We do not sell your personal data to any third party.

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

To exercise any of these rights, contact hello@scanhaz.ie. We will respond within 30 days.

We retain personal data for as long as necessary to provide our services and comply with legal obligations:

• Account data: retained while account is active + 2 years after closure
• Payment records: 7 years (Irish tax law)
• Affiliate records: retained while programme is active + 2 years
• Support communications: 3 years

Your data may be processed outside the European Economic Area (EEA), including in the United States. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

Photos you upload for hazard scanning are transmitted to AI analysis services for processing. These images may contain images of workers or identifiable locations. You are responsible for ensuring you have appropriate consent or legal basis under GDPR before uploading images containing personal data.

ScanHaz is not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via the platform. Continued use of ScanHaz after changes constitutes acceptance.