Policies for our websites and services.

Privacy notice for The Lowe Digital Estate and FireData Gateway

This notice covers enquiries and public website use across theloweestate.com and firedatagateway.com. Customer incident data is governed by the applicable service agreement.

Information you choose to send

When you use the contact form, our LUNA mail service sends us the details you enter, including your name, work email, organisation, topic and message. We use them to respond, arrange a demonstration, understand your requirements and keep a reasonable record of the business conversation.

Technical information

The hosting and security services used to deliver and protect the site may process routine connection information such as IP address, request time, browser details, requested page and security events. This supports delivery, fault diagnosis, abuse prevention and security. The public sites use TheLoweEstatePlatform with Cloudflare providing public delivery and security services.

Cookies and site reach

We estimate how many visitors use each of our public sites. A public page may send a request to our private LUNA service when it loads. A one-way hash of network address and browser type supports aggregate counts for up to 90 days. LUNA also keeps the IP address in encrypted form, browser and platform type, and approximate network location when available for up to 30 days. Only the System Owner can view those details and a map of estimated location. An IP location can be wrong and does not reveal a person’s precise position. We use these details to understand site use, investigate faults and protect our services under our legitimate interests. We do not set a tracking cookie or use local storage for this purpose. We respect Do Not Track and Global Privacy Control signals. The authenticated Workbench may use strictly necessary session information to keep a user signed in securely. See the cookie and storage policy for details.

Live customer data is a separate agreement

Any processing of a fire and rescue service's incident data requires a separate contract, data-processing schedule, agreed security controls, retention rules and customer assurance. The public website privacy notice is not that agreement.

Sharing, retention and your rights

Information may be handled by service providers needed to host, protect or operate the website, under appropriate arrangements. Enquiry records are kept only as long as reasonably needed for the conversation, legal obligations and business records. You can ask about your information, request correction or raise a privacy concern using the contact below. Applicable rights depend on the circumstances and UK data-protection law.

Privacy contact

Use the contact form. Do not include incident records, credentials or other sensitive information.

Cookies and browser storage

The estate-wide cookie and storage policy covers public visitor counts, necessary security measures and application sign-in storage, including the FireData Gateway Workbench.

Security

Security and responsible disclosure

The estate uses an evidence-led security approach covering service boundaries, least privilege, change control, monitoring, backup and recovery planning. The public site does not itself demonstrate that every control is implemented or independently assured.

Certification status: The Lowe Digital Estate does not claim ISO/IEC 27001 certification. An ISMS scope, risk register, statement of applicability, control evidence, internal audit and management review remain readiness work.

Report a concern

Until a dedicated security mailbox and disclosure process are confirmed, use the enquiry route, include only a high-level description and request a secure channel. Do not send credentials, exploit code, sensitive personal data or production records by ordinary email.

Customer assurance

Product-specific architecture, data flows, subprocessors, retention, recovery objectives, test evidence and incident responsibilities must be agreed during due diligence and recorded in the applicable contract.

FireData Gateway assurance

FireData Gateway operates downstream of mobilisation. Service access, credentials, source handling, delivery, retention and recovery are reviewed during onboarding. Encryption coverage, independent testing and recovery objectives must be evidenced for the agreed deployment; this page does not assert completed certification or penetration testing.

Accessibility

Accessibility statement

The site is designed to support keyboard navigation, visible focus, semantic headings, text zoom, responsive layouts, reduced-motion preferences and readable colour contrast. The enquiry form uses JavaScript to send your message. If you cannot use it, existing customers can reach us through the Helpdesk.

Formal independent evaluation against WCAG 2.2 AA has not yet been completed. Known readiness work includes assistive-technology testing, documented issue handling and a published contact route for accessibility feedback.

Website terms

Terms of use

Website content is general information and may describe services, applications or target-state architecture still in development. It is not an offer, warranty, service-level commitment, certification claim or substitute for an agreed contract.

Professional-history references describe the experience of named contributors. They do not imply that referenced organisations are customers, partners or endorsers. Product names and third-party marks remain the property of their respective owners.

Customer work must be governed by a written scope and applicable terms covering responsibilities, acceptance, data protection, security, support, fees, intellectual property, liability, termination and exit.

FireData Gateway is a commercial product. Pricing depends on integrations, configuration, data volumes, reporting, deployment and support requirements. Included capabilities, implementation and ongoing charges are confirmed in a written quotation.