Data Processing
For inspection job data entered into Sentinel by a dealer, customer or authorised user, the dealer or business customer is normally the controller. JK66 Car Sales Ltd, trading through Sentinel by DealDesk, normally acts as processor for that inspection job data.
JK66 Car Sales Ltd remains controller for its own account administration, service security, billing, support and legal compliance data.
Sentinel processes inspection job data to provide the service: creating jobs, inviting users, authenticating access, storing photos and notes, producing reports, sharing links where requested, supporting users and maintaining security. We process customer job data according to customer instructions and these product terms unless law requires otherwise.
People with access to Sentinel operational data are expected to handle it confidentially and only for authorised support, security, maintenance and service delivery purposes.
Measures include HTTPS, account authentication, hashed passwords, dealer-scoped permissions, invite controls, access logs, role-based access, backups or storage controls where configured, and operational monitoring.
Sentinel may use subprocessors for hosting, storage, email delivery, logging, support and related infrastructure. A current subprocessor list can be requested from privacy@dealdesksentinel.co.uk.
If we become aware of a confirmed security incident affecting customer inspection job data, we will notify affected customers without undue delay and provide information reasonably available to support investigation and legal obligations.
Dealers can request export or deletion of inspection job data, subject to technical feasibility, legal requirements, backup retention and any agreed contract terms. Requests should be sent to support@dealdesksentinel.co.uk.
Where a data subject request relates to customer-controlled inspection job data, we will provide reasonable assistance to the customer so they can respond. Some requests may need to be made directly to the relevant dealer or business customer.
Sentinel aims to use UK or appropriate regional infrastructure where practical. If international transfers are required through subprocessors, appropriate safeguards will be considered and documented where legally required.