Privacy Policy

Knull Trolley provides connected mobility infrastructure to retail destinations. Where we decide how and why personal information is used, we act as the controller. Where we process information on behalf of a destination operator, that operator is the controller and we act as processor under contract.

Enquiries. Name, work email, organisation and any details you choose to include when you contact us or request a demo.

Website usage. Basic technical information such as pages viewed and approximate region, used to keep the site secure and understand demand.

Shopper sessions. When a trolley session is opened, the platform records unit identity, dock, timing and session state. Operator reporting is built on aggregate patterns rather than individual profiles.

To respond to enquiries, to deliver and support deployments, to keep fleets available and safe, to meet legal obligations, and to improve the product. We do not sell personal information.

Depending on the activity we rely on legitimate interests (operating and improving the service), the performance of a contract, consent (where required, for example certain cookies), and legal obligation.

We share information with destination operators where they are the controller, with service providers who host and support our systems under contract, and with authorities where the law requires it.

Enquiry records are kept for as long as needed for the commercial relationship and a reasonable period afterwards. Operational session data is retained according to the agreement with the destination operator, then deleted or aggregated.

We operate in the United Kingdom and the United Arab Emirates. Where information moves between countries, we use appropriate safeguards, including standard contractual clauses where applicable.

Subject to local law you may request access, correction, deletion, restriction or portability, and object to certain processing. Contact us and we will respond within the applicable statutory period. You may also complain to your local data protection authority.

We apply role-based access, encryption in transit, audit logging over sensitive actions and least-privilege principles across our platform and internal systems.

We update this policy as the product and our obligations evolve. The date at the top of this page reflects the most recent revision.