Privacy Policy

This policy explains how Task2 collects, uses and protects personal data when you use our website and our mobile apps (together, the "Service"), and the rights you have over that data. The Service is provided by iCentric Systems Ltd, trading as Harbour SW Developments.

Task2 is bought to enable the creation and managing of tasks. Most of the personal data entered is entered by yourself or colleagues or work partners: who was given a job, who finished it, and what they said about it.

1. Information we collect

• Account details - your name and email address, your access level, and the name and telephone number recorded for your account. Passwords are stored only as a cryptographic hash and cannot be read by us.
• What you put in - tasks and their detail, how urgent they are and when they are due, the notes recorded when work is finished, blocked or passed to somebody else, and photographs attached to a task.
• A record of activity - which account made each change and when, kept so you and the people you work with can see what happened.
• Technical records of access - the IP address, the kind of device or browser, and the app version each request came from, kept to investigate faults and misuse.
• Billing details - held by our payment processor, not by us. We keep the subscription's state, when it renews and how many people it covers. We never see or store your card number.

2. How we use your information

To provide the Service and show your work to the other people you share it with; to send the emails the Service depends on, such as confirming an address, resetting a password and telling Administrators about a failed payment; to take payment; to investigate faults and misuse; and to meet our legal obligations. We do not use your data to train models, and we do not advertise to you.

3. How we share your information

We do not sell your personal data. We share it only with service providers who help us run the Service, and only as needed to do so:

• Stripe - to take subscription payments and to hold your card details.
• Amazon Web Services - to host the Service, store its database and attached photographs, and send its emails.

We may also disclose information where required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case we will notify you.

4. International transfers

Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or equivalent standard contractual clauses, so your data receives a comparable level of protection.

5. Data retention

We keep the data for as long as the account it belongs to exists. Within that, Task2 deliberately keeps history:

• A person who leaves is deactivated, not deleted. They can no longer sign in and they stop being charged for, but their name still appears on the work they did. Deleting the account outright would leave gaps in the record.
• A finished task is archived, not deleted, along with its notes and photographs.
• Cancelling a subscription does not delete anything.

If you want data erased rather than kept, an Administrator can ask us and we will delete or anonymise it within a reasonable period, except where we are required to keep certain records, such as billing and tax records, to meet legal obligations.

6. Security

We use appropriate technical and organisational measures, including encryption in transit, hashed passwords, access levels enforced by the server rather than only by the screen, and separation of each customer's data. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

7. Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have inaccurate data corrected, to ask for erasure or restriction in certain circumstances, to object to certain processing, and to receive your data in a portable form. To exercise any of these, contact us at support@icentricsystems.com.

Where the account the data sits in is held by somebody else - an employer, a client, or whoever else pays for it - they decide what is kept and for how long, so we may need to refer your request to them. You also have the right to complain to the Information Commissioner's Office.

8. Cookies

We use essential cookies needed to sign you in and keep your session secure. We do not use cookies for advertising. Because these cookies are strictly necessary to provide the Service, they cannot be switched off.

This marketing site can also use Google Analytics to count visits and see which pages are useful. Those cookies are not strictly necessary, so we ask first: nothing is loaded until you accept the cookie banner, and declining loads nothing at all. You can change your mind from cookie preferences in the footer. Your choice is remembered in your browser on this site only.

9. Children

The Service is intended for work and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the "Effective" date above and, where the change matters to you, tell you in the app or by email.

11. Contact us

iCentric Systems Ltd, trading as Harbour SW Developments. Questions about this policy or about your data: support@icentricsystems.com