LEGAL
Privacy policy
ABAX Field Operations is a product of ABAX. Data is our most important asset, and data protection is our key priority. This policy explains how the ABAX Field Operations app and platform process personal data, and how we keep it secure at all times.
Data privacy
ABAX processes data in compliance with the General Data Protection Regulation (GDPR) and according to customer instructions. We do not collect, store or process personal data beyond what is necessary to perform our tasks as data controller or data processor.
Privacy by design and by default
ABAX Field Operations is based on the principles of privacy by design and privacy by default. Data is protected without requiring any input from users — you should not have to do anything to ensure your data is safe; it should be safe by default.
These principles are reflected in Articles 25 and 32 of the GDPR: purpose specification (you are told what your data is used for), collection limitation (collection is lawful and transparent) and data minimisation (as little data as possible is collected, and only for immediate processing purposes).
What ABAX Field Operations collects
To run your jobs, ABAX Field Operations processes your account and profile details; the work orders, forms, time entries and messages you create; your device location during active jobs (to calculate travel times and confirm site check-in); photos and documents you attach to jobs; voice notes you record; push-notification tokens; and basic device and usage information.
Where ABAX Field Operations is linked to ABAX, live vehicle and asset data from your organisation's ABAX account may also be shown alongside your jobs.
Data processing procedures
We use both manual and automated systems to remove all unnecessary data and to ensure that data is anonymised. Our security procedures, access controls and tools protect your data at all times.
Information security — end to end
Security and privacy of data are ensured from the point of collection to the eventual destruction of data. At every point of the data lifecycle, data is continuously protected and accounted for. We rely on accountability measures such as record-keeping together with security measures such as anonymisation and access controls.
Sharing and subprocessors
Your data is made available to your own organisation (your employer, or the customer who invited you) and processed within the ABAX group. We use vetted subprocessors to deliver the service — including EU-region cloud hosting, authentication, messaging and payment providers — and we keep the responsible data controller informed of any changes. We do not sell your personal data.
Retention and deletion
When we receive a deletion request, data is deleted within 30 days. Deletion can apply to all data within a customer contract, or — for a single user — to only the data linked to that user.
Before deletion, potentially valuable data points may be anonymised so they can no longer be traced back to any customer or user; anonymised data may be kept for analytical purposes even after a deletion request.
Your rights
Under the GDPR you have the right to request what personal data we hold about you and the "right to be forgotten", as well as rights to rectification, restriction, portability and objection. To exercise any of these rights, contact your administrator or email our support team. You also have the right to lodge a complaint with your local data protection authority.
Cookies
The ABAX Field Operations web dashboard uses only the cookies necessary to keep you signed in and to remember your language and active workspace. The mobile app does not use advertising cookies or trackers.
Data controller
ABAX UK Ltd
Allia Business Centre, Peterborough United Football Club, London Road, Peterborough, PE2 8AN, United Kingdom
+44 1733 698 888
For the full ABAX group privacy statement, visit abax.com/legal/privacy