Privacy Policy

Overview

Operator: IslandWatch Ltd., Bermuda (“IslandWatch,” “we,” “us,” “our”).

Bermuda-only service: IslandWatch is operated from Bermuda and the App is intended for users located in Bermuda. Our privacy practices are designed to comply with Bermuda’s Personal Information Protection Act 2016 (“PIPA”), fully in force as of January 1, 2025.

Informational website: We may maintain a public website for informational purposes only (for example, product information and contact details). Users do not create accounts, log in, manage vehicles, track devices, or submit police reports through the website.

1. What personal information we collect

We collect information you provide in the App, information generated by your tracking Device, and information collected automatically for security and performance.

A. Required signup information

To create an IslandWatch account, we require:

• First Name
• Last Name
• Contact Number
• Birthday
• Driver’s License Number

We require these fields to operate the App, support account integrity, and enable incident reporting to law enforcement when you choose to use “Report to Police” (see Section 5).

B. Vehicle information (Vehicle Profile)

We collect: Vehicle Name, Make, Model, Year, Color, and License Plate Number.

C. Device and tracking information (only for vehicles linked to a Device)

IslandWatch tracking is provided through a Device installed on the vehicle. If your vehicle is linked to a Device, we collect:

• Location data: GPS coordinates and timestamps, plus movement/trip information.
• Alerts and event logs: motion/tamper indicators, geofence triggers, and connectivity status.

D. App, device, and security data (collected automatically)

• Device model, OS version, app version
• IP address (primarily for security and abuse prevention)
• Push notification token (to deliver alerts)
• Crash logs and performance diagnostics
• Login/security logs (e.g., suspicious access attempts)

E. Support communications

If you contact support, we collect the content of your request and related metadata needed to investigate and resolve the issue. We may provide support through a ticketing system and phone support.

F. Billing and payment information

We collect subscription plan details and billing status. Payments are processed through Authorize.net. IslandWatch does not store full payment card numbers on our systems.

What we do not collect in this iteration

• No photo uploads
• No video uploads
• No user-submitted media content through the App

(If we add media upload features later, we will update this Privacy Policy and provide notice.)

2. How we use personal information

A. Provide and operate the App

• Create and manage accounts
• Create Vehicle Profiles and link tracking Devices
• Provide tracking, geofences, alerts, and event history
• Send service messages and alerts you enable

B. Enable “Report to Police”

• Prepare and transmit an incident report payload when you tap “Report to Police” and confirm (see Section 5)
• Record the fact that you submitted a police report (for audit/history and to support the App)
• The data payload is then transferred to a police-managed portal for case action and resolution

C. Protect and improve the App

• Detect and prevent fraud, misuse, and unauthorised access
• Troubleshoot issues, fix bugs, and improve performance
• Maintain security logs and audit trails

D. Manage subscriptions and billing

• Process payments, manage renewals, and provide receipts

3. Anonymous and aggregated analytics

We generate analytics to understand usage and improve the App. These analytics are designed to be anonymous and aggregated and are not intended to identify you. Examples include:

• Average age ranges (derived from birthdays)
• Vehicle makes/models/years
• Alert/event frequency by vehicle category
• High-level usage and reliability metrics

We do not use sensitive identifiers (such as Driver’s License Number, Name, Address) in analytics outputs.

4. When we disclose personal information

We do not sell personal information and we do not share personal information with advertisers. We may disclose personal information in limited circumstances:

A. Service providers (processors)

To operate the App, we use providers for services such as payment processing (Authorize.net), cloud hosting/infrastructure, notifications, and operational tooling (e.g., support systems). These providers may process personal information only to deliver services to IslandWatch and must protect it appropriately.

B. Legal requirements and safety

We may disclose personal information when we believe it is reasonably necessary to:

• Comply with law, regulation, legal process, or lawful request
• Protect the rights, safety, and property of users, the public, or IslandWatch
• Investigate and address fraud, security incidents, or misuse

C. Business transactions

If IslandWatch is involved in a merger, acquisition, financing, reorganisation, or sale of assets, personal information may be transferred as part of that transaction subject to appropriate safeguards.

5. “Report to Police” (BPS portal) — user-initiated, confirmed, encrypted

IslandWatch provides a feature to report incidents to the Bermuda Police Service (BPS) via an encrypted API to an IslandWatch-managed police portal. This is the only theft/incident reporting mechanism in the App. IslandWatch does not provide a separate “mark as stolen” function in this iteration.

When confirmed, the API payload will include:

• Vehicle information (Vehicle Name, Make, Model, Year, Color, License Plate Number)
• Identity/contact information collected at signup (First Name, Last Name, Contact Number, Birthday, Driver’s License Number)
• The vehicle’s live location (and relevant context needed to support the report)

Optional in-app status after reporting

After a successful “Report to Police” submission, IslandWatch may display a “Stolen” status indicator on the vehicle tab to reflect that a police report has been filed via the App. This indicator is informational and tied to the “Report to Police” workflow.

6. Overseas processing and transfers

Although IslandWatch is operated in Bermuda and intended for users located in Bermuda, some of our service providers may process or store personal information outside Bermuda (for example, cloud infrastructure, notifications, or payment processing).

Where personal information is transferred to an overseas third party, we take steps designed to ensure appropriate safeguards are in place, consistent with PIPA, such as contractual protections, access controls, and vendor security reviews.

7. Data retention

We retain personal information only as long as necessary to provide the App, meet legal obligations, resolve disputes, and maintain security.

• Location history (Device-generated): retained for 1 year, then deleted or de-identified, unless longer retention is required for legal compliance, dispute resolution, or an active investigation-related hold.
• Account and Vehicle Profile information: retained while your account is active and for a reasonable period after closure/deletion for security, fraud prevention, and compliance.
• Security logs: retained for a reasonable period to detect abuse, investigate incidents, and protect accounts.
• Support records: retained as needed to resolve issues and maintain support history.

If you request deletion, we will delete or de-identify personal information where appropriate, subject to lawful exceptions and the retention needs above.

8. Security

We use administrative, technical, and organisational safeguards designed to protect personal information, including:

• Encryption in transit and (where appropriate) at rest
• Monitoring and logging for suspicious activity
• Secure credential handling
• Vendor security requirements for providers that process data on our behalf

No system is perfectly secure. You are responsible for keeping your credentials confidential.

Bermuda-specific breach notice: Under PIPA, if a breach is likely to adversely affect an individual, organisations must notify the Privacy Commissioner and affected individuals without undue delay.

9. Your rights and choices (Bermuda / PIPA)

IslandWatch is operated in Bermuda and the App is intended for users located in Bermuda. Where Bermuda law applies, your privacy rights are governed by Bermuda’s Personal Information Protection Act 2016 (“PIPA”).

Subject to PIPA and limited exceptions (for example, where disclosure would compromise security, an investigation, or is otherwise permitted/required by law), you may request to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Request deletion or de-identification of personal information where appropriate (noting that some data must be retained for security, legal compliance, dispute resolution, or the retention periods described in this Privacy Policy)
• Withdraw consent for optional processing, where we rely on consent (if applicable)

How to submit a request: support@islandwatch.bm. Please include your account email/phone number and the details of your request. To protect your account, we may need to verify your identity before responding.

Response and recordkeeping: We will respond within a reasonable timeframe and may retain a record of requests and responses for compliance and security purposes.

10. Informational website

IslandWatch may maintain a public website for informational purposes only. The website is not used for account creation, logins, payments, vehicle tracking, or police reporting. The website may still collect limited technical information automatically to operate securely and measure performance, such as:

• IP address (generally for security and abuse prevention)
• Browser/device type and basic analytics
• Basic cookie data (if used for essential functionality or analytics)

You can control cookies through your browser settings. Where required, we provide appropriate notice and choices for non-essential cookies.

11. Children’s privacy

IslandWatch is not intended for children.

Bermuda-specific: PIPA defines a child as an individual under 14 and provides increased protections for children’s personal information. We do not knowingly collect personal information from children in a manner not permitted by applicable law. If we learn we have collected such information, we will take steps to delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy periodically. If changes are material, we will provide notice through the App and/or our informational website. The “Last updated” date indicates the most recent revision.

13. Contact us

Organisation: IslandWatch Ltd.

Address: Weldon House, 7 Victoria Street, Hamilton HM11, Bermuda

Email: support@islandwatch.bm

See also our Terms of Use.

© IslandWatch Ltd. All rights reserved.