imabi Ltd
imabi Ltd · Company no. 12854897 · ICO ref. ZB028232 · gdpr@imabi.com
This notice explains how imabi Ltd uses personal information across Travel Guardian and imabi Channels, including school and workplace services currently called Inspire and Pro, Live Desk, websites and pages opened through QR codes. It applies to these activities whether they are offered through a separate app today or through a Channel later. It explains the information people provide, who receives it, how optional location features work and how analysis or AI may assist authorised recipients. A customer organisation may provide its own notice where it decides how its service uses information.
Inspire and Pro remain available at the date of this notice. imabi plans to move their services into Channels and retire the separate Inspire and Pro apps in January 2027. The planned timing may change. We will tell affected users and customer organisations about material changes to how their personal information is used before those changes take effect. A change of app name or access route does not itself change who receives a report or why it is used; the details shown in each service and the relevant customer notice govern those points.
imabi Ltd, company number 12854897, is registered with the Information Commissioner's Office under reference ZB028232. Contact: gdpr@imabi.com.
imabi decides how information is used for its own website, business contacts, direct user accounts and some Travel Guardian functions. Where a school, employer, local authority, transport operator, venue or other organisation chooses what information its Channel or reporting service collects and why, that organisation normally acts as controller and imabi provides the technology on its instructions. Some services or projects may involve separate or joint decisions. The service screen and the relevant organisation's notice identify the responsible organisation and reporting recipient.
A person may view information in an app, on a website, in an embedded page or by scanning a QR code. Viewing a page does not itself mean that person has submitted a report or agreed to share their location. We may receive technical information needed to provide and secure the page, such as an IP address, browser or device information, time of access and the page or code used.
Where an account is required, information may include name, contact details, login details, organisation or Channel membership and preferences. An account is not required for every web or QR journey. We collect date of birth, postal address, gender or payment information only where a particular service requires them.
If a person sends a report, survey response, message or request for help, we process the information they enter and any files they attach, along with submission time and the service or recipient selected. Some forms permit anonymous submissions. Anonymous means that the person is not asked to identify themselves in the form; technical data or details in the submission may still make them identifiable. The form explains who receives it, whether a reply is possible and any onward sharing by the recipient.
We may process information about how services are used to maintain them, measure engagement and identify patterns, such as report categories, locations and times. A dashboard, map or export may still involve personal information where a person can be identified from its detail or combined with other information.
Location features depend on the action the person chooses and the permissions they grant on their device. A person can choose to share a journey, arrival or location with contacts they select, or submit a location with a report. Some features may use location to display nearby information or alerts. The feature provides information about its location use when it is selected. Location sharing is initiated by the person using the feature.
If a person chooses contacts for a sharing feature, we process the selected contact details to deliver that feature.
Reports may contain sensitive information, including information about health, disability, ethnicity, religion, sexuality, safeguarding, crime or alleged wrongdoing. A person may also disclose information about someone else. We process submitted content to deliver it to the authorised recipient, support its handling, secure the service and, where enabled and justified, produce analysis or AI assistance. We restrict access according to the service configuration and applicable agreements.
imabi staff or approved suppliers may need controlled access to content for support, security or incident resolution. Please include only the information needed to explain your report, including information about other people.
Where enabled, imabi may use automated tools to organise submissions, detect patterns, prepare summaries or suggest actions to authorised users. Outputs may include categories, trends, map views or recommendations. Such outputs can be wrong or incomplete and should be checked by an appropriate person before action is taken.
The organisation responsible for a service explains its lawful bases in its own privacy information where it decides how submissions are used. imabi uses personal information to provide and secure its direct services, answer enquiries, administer accounts, and meet legal obligations. Optional marketing is handled under the applicable marketing rules and preferences.
Depending on the service, recipients may include the organisation operating a Channel, its designated reporting staff, a person's chosen contacts, imabi's authorised staff and contracted hosting, support, messaging (including text messages), mapping, analytics or AI suppliers. A report may be sent to a named external reporting service when the person chooses that route; that service's own notice may apply. We do not sell personal reports.
Our websites and QR pages may use cookies or similar technologies. The cookie notice and choices presented on those pages explain what is used. Links to third-party sites take people to services with their own privacy information.
Our school services are currently offered through Inspire and may later be offered through Channels. The education organisation is responsible for explaining how it uses pupil reports and its lawful basis. imabi provides age-appropriate information about its services. Children can see who receives a report and how optional location sharing works at the point of use.
We use access controls, encryption where appropriate, staff training and supplier agreements to protect information. Access to reports is limited according to role and service configuration.
We keep information only as long as needed for its purpose or as legally required. The retention of reports submitted to a customer organisation is determined under that organisation's arrangements with imabi. You can ask the relevant organisation, or contact us, for information about the period that applies to a particular service.
To protect reporting services from abuse, we may use technical identifiers, such as a device identifier created in the browser and a one-way scrambled form of a network address. These are kept only for a short period and are not used to identify individuals.
People may request access, correction, erasure, restriction or portability, object to certain processing, withdraw consent where consent is relied upon, and raise concerns about applicable automated decisions. These rights have conditions and exceptions. Requests may be sent to gdpr@imabi.com; if another organisation controls the report, we will direct the person to that organisation or assist it under our agreement. We may ask for proportionate evidence of identity where needed; a passport copy is not routinely required.
People may complain to the Information Commissioner's Office at ico.org.uk. We normally respond to valid rights requests within one month, subject to lawful extensions.
We will update this notice when services or data uses change and bring material changes to affected people's attention.