Version 2.1 · Last updated: 2 September 2026
CityIntel provides a situational intelligence platform for security operations and business continuity teams. This policy explains what information we collect from organisations and individual users, how it is used, and the choices available to you.
CityIntel is a trading name of CITYINTEL LTD, a company registered in England and Wales under company number 17403651, with its registered office at 195 Suite Ra01, Wood Street, London E17 3NU, United Kingdom. For any question about this policy or how your data is handled, contact us at contact@city-intel.com.
CITYINTEL LTD is registered with the Information Commissioner's Office (ICO), the UK data protection regulator, under registration reference ZC236971. Our entry can be verified on the ICO's public register of fee payers.
CityIntel handles personal data in two different capacities, and which one applies changes who you should contact:
If you are an employee or traveller whose details have been added to CityIntel by your employer, your employer is the controller for that information. Requests about it should go to them in the first instance, and their own privacy notice will apply alongside this one.
We collect the following categories of information:
We use the information described above to:
Where we act as controller, we rely on the following legal bases under the UK GDPR:
Where we act as processor, the legal basis for the underlying processing is determined by your organisation as controller.
Where a user submits a location — for example by using "Near me" on the map, dropping a focus pin, or responding to a check-in — that location is used only to display relevant information (such as nearby outages or disruptions) and, where applicable, is stored as part of the check-in or panic alarm record for your organisation's safety records. Location data is not used for advertising or shared with third parties for marketing purposes.
CityIntel aggregates publicly available information from third-party sources — including transport operators (e.g. TfL, National Rail, Deutsche Bahn, SNCF), power network operators (e.g. UK Power Networks, Northern Powergrid, National Grid ED, ODIN), aviation authorities (e.g. FAA NAS, OpenSky Network), and news/open-source intelligence feeds — to provide situational awareness. These integrations are one-way: we request publicly available data from these sources and do not send your personal data to them.
We do not sell personal data. We share data only in the following circumstances:
The authoritative and current list is the CityIntel Sub-processor List, which forms part of our Data Processing Agreement and is available on request. We give organisations advance notice before a new sub-processor begins processing their personal data.
Some of our service providers are based outside the United Kingdom, or may process data in other countries including the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law — such as the UK International Data Transfer Agreement or Addendum, Standard Contractual Clauses, or an applicable adequacy decision. Details of the safeguards in place for a specific provider are available on request.
Operational data (assets, travellers, check-ins, alerts, and reports) is retained for as long as your organisation maintains an active subscription. On termination or expiry, it is retained for 90 days to allow for export and account closure, after which it is deleted, unless a longer period is required by law. Billing and financial records are retained for six years to meet UK statutory accounting requirements. You can request earlier deletion by contacting your organisation's administrator or by reaching out via our Support page.
Depending on your circumstances, you may have rights to access, correct, export, restrict, object to, or request deletion of your personal data, and to withdraw consent where processing relies on it. Because CityIntel is typically deployed by an employer as data controller for staff and traveller records, requests relating to that data should generally be directed to your organisation in the first instance. For account-level requests relating to your own CityIntel login, contact us at contact@city-intel.com. We will respond within one month, as required by the UK GDPR.
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to address your concerns first.
We apply administrative, technical, and physical safeguards designed to protect personal data, including encrypted connections (HTTPS/TLS), role-based access controls, signed session tokens, and audit logging of administrative actions. A fuller description of our technical and organisational measures is set out in the Annex to our Data Processing Agreement. No system can be guaranteed 100% secure, and we encourage organisations to follow good password and access management practices for their CityIntel accounts.
CityIntel uses a small number of cookies and similar browser storage mechanisms to keep you signed in and to remember your preferences. These are described in our Cookie Policy.
If you have questions about this privacy policy or how your data is handled, email contact@city-intel.com, get in touch via our Support page, or contact your organisation's CityIntel administrator for account-specific queries.
This policy may be updated from time to time. Material changes will be reflected by updating the version and "Last updated" date above.