Last updated: 2026

1. Introduction

This Privacy Policy explains how personal data is processed when using the IPGUARD door entry service and BATICONNECT cloud management platform.

The IPGUARD service enables residents to receive visitor calls and manage building access through secure communication between door entry panels, mobile applications, and cloud infrastructure.

IP Door Entry Ltd is committed to protecting personal data and processing it in accordance with:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018

2. Roles and Responsibilities

For the operation of the IPGUARD service:

Data Controller
The housing provider, building manager, or service operator responsible for the property.

Data Processor
IP Door Entry Ltd (IPDE), which processes data only on behalf of the Data Controller to provide the contracted service.

Sub-processors
Trusted partners may be used to deliver the service, including:

• OVH – secure cloud hosting infrastructure (EEA)
• Noralsy – technical system support

All sub-processors are contractually required to protect personal data and comply with applicable data protection laws.

3. Personal Data We Process

The IPGUARD system is designed to process only the minimum personal data necessary to operate the service.

Personal data may include:

• Resident telephone number
• Property address or apartment identifier
• Access event and call logs
• Device connection information necessary to operate the service

The system does not process:

• biometric data
• financial information
• identity documents
• special category data

Certain data, such as visitor photographs taken during a call, may be stored locally on the resident’s device only and are not transmitted or stored by IP Door Entry Ltd.

4. How Personal Data Is Collected

Personal data is normally provided by the building manager or housing provider responsible for the property.

Data may be collected during:

• initial system setup
• resident registration
• use of the IPGUARD application
• operation of the door entry system

5. Purpose of Processing

Personal data is processed only for legitimate operational purposes necessary to deliver and support the IPGUARD service, including:

• providing the IPGUARD door entry service
• enabling residents to receive visitor calls
• managing building access
• maintaining service security
• complying with legal and regulatory obligations

Personal data is processed solely for the purpose of delivering the contracted service and is not sold, traded, or used for marketing purposes.

6. Data Security

IP Door Entry Ltd implements appropriate technical and organisational security measures to protect personal data.

Security measures include:

• encrypted communications between devices, applications, and cloud services
• secure cloud hosting within the European Economic Area (EEA)
• role-based access controls
• authenticated administrative access
• monitoring and vulnerability management processes
• secure backup and deletion procedures

The security of the IPGUARD platform is independently validated through recognised cybersecurity standards.

IP Door Entry Ltd holds:

• IASME IoT Cyber Assurance Level 1 & Level 2
  aligned with the ETSI EN 303 645 IoT security standard
• Cyber Essentials certification

These certifications support compliance with the UK’s Secure Connected Devices (SCD) legislation, confirming that the system meets recognised cybersecurity and data protection requirements.

In the event of a personal data breach, IP Door Entry Ltd will notify the Data Controller without undue delay in accordance with UK GDPR obligations.

7. Data Storage and Hosting

Personal data processed through the IPGUARD platform is stored within secure cloud infrastructure located in the European Economic Area (EEA).

Data is not transferred to countries outside the EEA.

8. Data Retention

Personal data is retained only for as long as necessary to operate the service or meet legal obligations.

Typical retention periods include:

• operational resident data: retained during the service contract
• system backups: retained for 45 days
• access event logs retained for approximately 90 days
• administrative audit logs: retained for 45 days

Where required, data may be retained longer for legal compliance, security investigations, or dispute resolution.

Personal data is deleted or returned upon instruction from the Data Controller or when it is no longer required to deliver the service, unless retention is required by law.

9. Data Sharing

Personal data may be shared only where necessary to deliver the service, including with authorised sub-processors and service partners.

Third parties are contractually prohibited from using personal data for any purpose other than delivering the IPGUARD service.

Data may also be disclosed where required by law or lawful authority.

10. Your Rights

Individuals have rights under UK GDPR, including the right to:

• access personal data
• correct inaccurate data
• request deletion where applicable
• restrict processing
• object to processing in certain circumstances

Requests should normally be directed to the Data Controller (the building manager or housing provider) responsible for the service.

11. Changes to This Policy

This policy may be updated periodically to reflect changes to the service, legal requirements, or security practices.

The most current version will always be available through IP Door Entry Ltd.

12. Contact

For privacy enquiries relating to the IPGUARD service, please contact:

IP Door Entry Ltd
info@ipdoorentry.co.uk
08000 156 496