Privacy policy

Last updated: 13 October 2026

NodeTrack supplies vehicle security products, GPS trackers and immobilisers, and runs an online tracking service through this website and the NodeTrack phone app. This policy explains what personal information we collect, why we use it, who we share it with, how long we keep it and the rights you have. It applies to our customers, the people they give a login to, and anyone who contacts us.

1. Who we are and who is responsible

NodeTrack is responsible for the personal information about our customers and the people who use our website and app. You can contact us on 0333 070 4331 or on WhatsApp.

If a business uses NodeTrack to track vehicles driven by its staff, or a hire company tracks vehicles it lends out, that business decides how the tracking information about its drivers is used. For that information the business is responsible (the “controller”) and we handle it on its instructions (as its “processor”). If you drive such a vehicle, please contact the business first; we will help it answer you.

2. The information we collect

• Account details: name, email address, phone number, postal address and company name; your login, with the password stored only in scrambled (hashed) form that no one can read; and the devices you sign in on (type of phone or browser, internet address and sign-in dates).
• Vehicle details: registration, make, model and the name you give the vehicle; the tracker’s identity (IMEI, model and SIM number) and its settings; immobiliser and installation records.
• Tracking information from the tracker: location, speed, direction and time; ignition; vehicle and tracker battery; GPS signal; mileage; and events such as speeding, harsh driving, towing, power cuts and entering or leaving an area you set. From this we produce journeys, daily summaries, alerts and street addresses.
• Drivers and hirers you add: names, phone numbers, notes, and when each person was put on and taken off a vehicle.
• Cameras: where a NodeTrack camera is fitted, video and pictures it records and driver-behaviour alerts.
• Payments: charges, payments, top-ups and your account balance. Direct Debits and card payments are taken through Stripe. For a Direct Debit you enter your name, address and bank details on Stripe’s own secure page; we keep only the last four digits of the account number, a reference to your Direct Debit Instruction and the state of each collection. For card payments we never see or store your full card number.
• Phone app: a notification address for your phone, the type of phone and app version, and your alert settings. The app never uses your phone’s location (see section 5).
• Orders and enquiries: when you order on our website, your name, phone number and postcode, whether you want it fitted or will fit it yourself, and if you give them your email address, vehicle registration, make and model, the best time to call and your message. To stop repeated automated orders we also keep a scrambled (hashed) form of the internet address the order came from, for one week.
• Messages: what you tell us when you contact us, and records of the alert emails and notifications we send you.
• Vehicle checks: MOT and tax information from the DVSA and DVLA for the registrations you enter.

We need this information to provide the service. If you do not give it, we may not be able to track your vehicles or contact you about them.

3. How we use it and our legal reasons

• To provide the service you signed up for (performance of our contract with you): showing vehicles on the map, recording journeys, sending alerts, controlling immobilisers, reports, installation and support.
• To deal with your order or enquiry (steps you ask us to take before a contract): calling you back, confirming the price for your vehicle and booking fitting.
• To take payment and keep accounts (contract, and our legal duty to keep tax and accounting records).
• To keep your account and the service secure, prevent misuse and fix faults (our legitimate interests in running a safe, reliable service).
• To help recover a stolen vehicle and to deal with the police, insurers or recovery agents when you ask us to or when the law requires it (legitimate interests and legal obligations).
• To tell you about important changes to the service or this policy.

We do not sell personal information, we do not use it for advertising, and we do not send marketing without your permission. We do not make decisions about you by automated means that have legal or similarly significant effects.

4. Who we share it with

Only as far as needed to run the service, with organisations that may use it only to provide their service to us:

• Our hosting provider, whose servers are in Europe.
• Our email delivery provider, and Expo, Google (Firebase Cloud Messaging) and Apple (Push Notification service) to deliver app notifications.
• Google Maps for the website map; OpenStreetMap’s address service (Nominatim), to which we send a position rounded to about 10 metres to look up the street address; and OpenFreeMap for the app’s map pictures.
• Stripe for Direct Debits and card payments (your name, email address, address and bank or card details, which Stripe holds under its own privacy policy).
• The DVSA and DVLA for MOT and tax checks (the registration only).
• Our camera platform provider, where a camera is fitted, to carry its video.
• The mobile networks that carry the tracker’s data.
• The police, insurers or vehicle recovery agents, when you ask us to or when the law requires it.

Within your own account, everyone you give a login to can see your account’s vehicles, alerts and history, and our installers can see what they need to fit and test your equipment.

5. The NodeTrack phone app

• No phone location: the app never uses your phone’s location. The map shows your trackers’ positions from our servers.
• Signing in: your password is sent to us only to sign you in and is never stored on the phone. The app keeps a sign-in key in the phone’s secure storage (Android Keystore or iPhone Keychain) and deletes it when you sign out. If you turn on fingerprint, face or passcode unlock, the check happens on your phone; we never receive any biometric information.
• Notifications: to send alerts to your phone, the app registers a notification address for it (through Expo, using Google Firebase Cloud Messaging on Android and Apple Push Notification service on iPhone), with the type of phone and app version. Notifications contain the alert, the vehicle’s registration, the time, the place and the speed, so they may show on your lock screen. A phone keeps receiving your account’s alerts after you sign out until you switch off “Send alerts to this phone” in the app or an administrator removes the phone.
• Services the app opens: map pictures come from OpenFreeMap (OpenStreetMap), which sees your internet address and the map area shown; app updates come from Expo. Street View opens Google Maps, MOT and tax links open GOV.UK, and card top-ups open Stripe’s payment page in your browser.
• On your phone only: dashcam video plays through NodeTrack only when you start it and is not saved on the phone. Spreadsheet (CSV) downloads are made on the phone and shared only where you choose.
• No advertising or analytics: the app contains no advertising, analytics, tracking or crash-reporting tools, and we never share or sell your information for advertising.

6. Transfers outside the UK

Some of our providers (for example Stripe, Google, Apple, Expo and our email provider) may process information outside the UK, including in the United States. When they do, the transfer is protected by UK adequacy regulations (including the UK–US data bridge) or by the UK’s approved contract terms (the International Data Transfer Agreement or Addendum).

7. How long we keep it

• Tracking history (positions, journeys and alerts) and driver and hirer records: for the period on your plan (6, 12, 18, 24 or 36 months), then deleted automatically.
• Account and billing records: while your account is open, then for up to 6 years for tax and accounting.
• Sign-ins: end after 90 days without use.
• Orders and enquiries from the website: deleted two years after we last dealt with them. If you become a customer, your account records above apply.
• Records of alert emails and notifications: 30 days.
• Backups: replaced regularly, so deleted information leaves them over time.

8. How we protect it

Information travels over encrypted connections (HTTPS); passwords are stored only as scrambled hashes; access is limited by role (customer, installer and our own staff); sensitive actions such as immobiliser commands are recorded; and we keep regular backups.

9. Your rights

Under the UK GDPR and the Data Protection Act 2018 you have the right to ask us for a copy of your personal information (a “subject access request”), to have it corrected, to have it deleted, to limit how we use it, to object to how we use it, and to receive it, or have it sent to another organisation, in a usable format. Where we rely on your permission, you can withdraw it at any time. These requests are free. Contact us using the details above and we will reply within one month; we may first ask you to confirm who you are. If you drive a vehicle tracked by an employer or hire company, contact them first, as they decide how your tracking information is used.

If you are unhappy with how we handle your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

10. Deleting your account

You can ask us to delete your NodeTrack account and the information in it at any time. Call 0333 070 4331 or message us on WhatsApp, telling us the name and email address on the account. If you share a login with a business, your account administrator can also ask us.

Once we have confirmed it is you, we delete your login, the phones registered for alerts, your alert settings, your vehicles’ tracking history, driver and hirer records and vehicle details within 30 days. Billing records are kept for up to 6 years where the law requires it, then deleted. To stop alerts on just one phone, switch off “Send alerts to this phone” in the app.

11. Cookies and similar technologies

Cookies are small files a website stores in your browser; browser storage works the same way. NodeTrack uses only the ones needed to run the website and keep you logged in, which UK law (the Privacy and Electronic Communications Regulations) allows without asking for your consent. We do not use social media cookies, and we do not let anyone track you across other websites. If we use Google Analytics or Google Ads on this website, they are optional: nothing from Google is loaded until you choose "Accept all" (or tick them under "Choose") in the cookie banner, "Reject all" is just as easy, and you can change your mind at any time with the "Cookie settings" button at the bottom of the page.

Counting visits without cookies. To see how people find us, we count page visits, taps on our phone number or WhatsApp link, and orders on our own server. Each one only adds to a daily total for the page and the website that sent the visitor (for example Google search, Facebook or a direct visit). No cookie is set, no IP address or device identifier is kept, and the counts cannot be traced back to you. When you send an order we also record where you arrived from, and what you choose under "How did you hear about us?", with your order.

Our website font is served from our own server, so your browser does not contact Google Fonts. The NodeTrack phone app does not use cookies. You can delete cookies and browser storage at any time in your browser’s settings; the portal will then ask you to log in again.

12. Children

Our service is not intended for anyone under 18.

Map credits: Map data © OpenStreetMap contributors. Maps in the app come from OpenFreeMap, built on OpenStreetMap data. See our terms of use.

13. Changes to this policy

If we change this policy we will update this page and the date at the top. We will tell you about important changes by email or in the app.

14. Contact us

Call 0333 070 4331 or message us on WhatsApp.