Privacy requests

How to make a request

Email privacy@alarmstation.app with “Privacy request” in the subject.

Where the law gives you a deadline we will meet it, and we aim to answer substantively within 45 days either way.

Who can make a request

Anyone. Alarm Station keeps a record of the alarms raised by each unit in a community, identified by whatever the community named that unit, which is usually a room or apartment number. So a record can relate to somebody who has never touched a screen. If you live somewhere that uses Alarm Station, or you work at a site where it is installed, you can ask.

If you sign in to the web admin as a dealer or as staff at a community, your account is administered by your dealer, and they can act on a request about it as well.

What you can ask for

• What information we hold that relates to you.
• A copy of it.
• To have it corrected.
• To have it deleted.
• To know who it has been shared with, and to object to a particular use of it.

Correction and deletion both have limits. What a unit is called, or whose account is whose, can be put right, and the organization or its alarm company does that directly. What happened during an alarm is different: that record is append-only, and the whole of its value is that nobody can quietly alter it later, including us. Where you believe such a record is wrong, your account of it can be noted alongside the record rather than replace it.

Requests against those records are the organization’s to decide, and a legal hold can put them beyond its reach as well.

What to include

We hold very little that identifies a person by name, so a request with only a name may not match a record. What locates one is the place and the time.

• The name of the community, building or site.
• Roughly when, even to the nearest day.
• For a photograph taken at a screen, the date and approximate time is usually enough.

Please do not send medical details or other sensitive information with your request. We do not need it in order to find a record.

Who decides

For information in the product, the organization that uses Alarm Station decides what happens to it, and their alarm company administers it. We process it on their instructions. When you write to us we will acknowledge your request, tell you what we hold, and work with them to answer you. We will not delete a record they are relying on, or release it to anyone else, without their instruction.

Where that organization is a HIPAA covered entity, your rights of access and amendment run against them rather than against us, and we support them in meeting your request. Contacting them directly is often faster.

If your request concerns this website, such as a message you sent through the contact form, we decide what happens to it and will act on your request directly.

How long information is kept

Retention periods, including for attribution photographs, are set out in the privacy policy, along with what we collect and who it is shared with.