Privacy Policy

1. Who we are

Nearhuman Ltd ("we", "us", "our") is a technology company building intelligent safety systems for micromobility and autonomous devices. We are a private limited company registered in England and Wales under company number 16009276, with our registered office at 32 Mortimer Road, Filton, Bristol, BS34 7LF, United Kingdom.

We are the data controller for the personal data described in this policy, and we are registered with the Information Commissioner's Office (ICO).

For data protection enquiries, please contact us at: info@scootrr.com

2. Information we collect

Information you give us

• Contact form: your name, email address, and the content of your message.
• Newsletter: your first name and email address.
• Meeting bookings: your name, email address, and the meeting time you choose when booking a call with a member of our team.
• Pilot dashboard accounts: if you request access to one of our pilot programme dashboards (such as the Bristol road-survey pilot), we collect your full name, work email address, organisation, and a password. Passwords are stored only as a one-way cryptographic hash — we never store or see your actual password. Accounts are reviewed and approved by an administrator before access is granted.

Information collected automatically

• Security and technical data: we process IP addresses transiently for rate-limiting and abuse prevention, and standard server logs are generated by our hosting provider.
• Analytics (with your consent only): if you accept analytics cookies via our cookie banner, we use Google Analytics to understand how visitors use our site (pages visited, approximate location at country/city level, device and browser type). If you decline, Google Analytics is never loaded.
• Performance metrics: we use Vercel Speed Insights to measure page-load performance. This is aggregated and anonymised and does not use cookies.

Road-survey data (Bristol pilot)

As part of our Bristol road-condition pilot, sensor-equipped vehicles capture low-resolution street-level images of road defects together with GPS and motion telemetry. These images are taken of the road surface for the purpose of detecting defects such as potholes; they may incidentally capture parts of vehicles, registration plates, or passers-by. We do not use this imagery to identify individuals, we minimise what is captured and stored, and access is restricted to approved pilot participants through authenticated accounts.

3. How we use your information and our lawful bases

Under the UK General Data Protection Regulation (UK GDPR), every use of personal data needs a lawful basis. Ours are:

• Consent: for newsletter subscriptions and analytics cookies. You can withdraw consent at any time — every newsletter includes an unsubscribe link, and you can decline or clear analytics cookies at any time (see section 9).
• Contract (or steps taken at your request before a contract): for creating and administering pilot dashboard accounts and for scheduling meetings you book with us.
• Legitimate interests: for responding to contact form enquiries, for site security and rate-limiting, and for collecting road-survey data in our pilot programmes. Our legitimate interest in the pilot is improving road safety by detecting road defects; we have balanced this against the privacy impact of incidental capture and apply the safeguards described in section 2.

4. Where your data is stored

All personal data that we store ourselves is held in the United Kingdom:

• Our website and its server-side functions run in London, United Kingdom (Vercel, London region).
• Our database is hosted in London, United Kingdom (Neon, AWS eu-west-2).
• Pilot programme imagery and survey files are stored in a private storage bucket in London, United Kingdom, and are only ever served through our own authenticated servers.
• Login sessions and rate-limiting counters are held in London, United Kingdom (Upstash Redis, London region).
• Internal company files are stored in Microsoft Azure's UK South region.

5. Who we share your information with

We do not sell or rent your personal information. We share data only with service providers (processors) who help us run the website, under contracts that require them to protect it:

• Vercel — website hosting and content delivery (data stored in the UK; see Vercel's Privacy Policy).
• Neon — database hosting (data stored in the UK).
• Upstash — session storage (data stored in the UK).
• Microsoft Azure — file storage (UK South region).
• Brevo — newsletter delivery and booking confirmation emails. Brevo stores data within the European Union. See Brevo's Privacy Policy.
• Formspark — processes contact form submissions on our behalf. See Formspark's Privacy Policy.
• Cloudflare Turnstile — bot protection on our forms; it processes technical browser signals and IP addresses transiently to distinguish humans from bots.
• Google — Google Analytics (only with your consent, section 9) and Google Meet links when you book a meeting with us.

We will never share your personal data with third parties for their own marketing purposes.

6. International transfers

We keep the data we store ourselves in the UK. Some of our service providers are, however, based in the United States (for example Formspark, Google, and Cloudflare), or are US companies operating UK data centres (Vercel, Neon, Upstash). Where personal data is transferred outside the UK, we rely on safeguards recognised under UK GDPR: the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, as applicable to each provider. Data sent to providers in the European Union (such as Brevo) is covered by the UK's adequacy regulations for the EU.

7. Data security

All traffic to and from our website is encrypted in transit (HTTPS). Passwords are stored only as one-way cryptographic hashes. Pilot programme imagery is held in private storage that is never publicly accessible and is only served through authenticated requests. Access to personal data within Nearhuman is restricted to staff who need it, and administrative access is protected by separate authentication.

8. Data retention

• Newsletter data: kept for as long as you remain subscribed. When you unsubscribe, you are removed from our active mailing list.
• Contact form enquiries: retained only for as long as necessary to resolve your enquiry.
• Booking data: retained for as long as needed to hold the meeting and follow up on it.
• Pilot dashboard accounts: retained for the duration of the pilot programme, or until you ask us to delete your account.
• Road-survey data: retained for the duration of the pilot and the analysis that follows, after which it is deleted or fully anonymised.
• Login sessions: expire automatically after 7 days.
• Rate-limiting records: held transiently and expire automatically within minutes to hours.

9. Cookies and analytics

Essential cookies

We use a small number of strictly necessary cookies that do not require consent: a session cookie that keeps you logged in to pilot dashboards, and a cookie that remembers your cookie-consent choice (kept for 12 months).

Analytics cookies (optional)

With your consent, we use Google Analytics to understand how our website is used. Google Analytics is only loaded after you click "Accept" on our cookie banner — if you decline, no analytics cookies are set and nothing is sent to Google. You can change your mind at any time by clearing this site's cookies in your browser, after which the banner will appear again and analytics will stay off unless you accept.

We do not use advertising cookies or any other third-party tracking.

10. Your rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the data we hold about you
• Right to rectification: ask us to correct inaccurate data
• Right to erasure: ask us to delete your data
• Right to restrict processing: ask us to limit how we use your data
• Right to object: object to our processing of your data, including any processing based on legitimate interests
• Right to data portability: request your data in a portable format
• Right to withdraw consent: at any time, where processing is based on consent

To exercise any of these rights, contact us at info@scootrr.com. We will respond within one month.

11. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority. We would, however, appreciate the chance to address your concerns first — please contact us at info@scootrr.com.

12. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.