Privacy Notice

1. Who we are

GeoVault is operated by Bridgeporth Ltd, a company registered in England and Wales under company number 07921496. Bridgeporth Ltd trades under the name Metatek Group.

Registered office: C/O Mercer & Hole, The Pinnacle, 170 Midsummer Boulevard, Milton Keynes, England, MK9 1BP.

In this notice, “GeoVault”, “Bridgeporth”, “we”, “us” and “our” refer to Bridgeporth Ltd.

For privacy enquiries, contact Metatek Group at info@metatek-group.com.

2. What this notice covers

This notice explains how we use personal information when you:

• visit the GeoVault website;
• request or download a survey factsheet;
• receive or accept a GeoVault invitation;
• create or use a GeoVault account;
• access licensed survey information or files; or
• contact us about GeoVault.

3. Information we collect

We may collect:

• your name, business email address, employer and organisation;
• your GeoVault account, organisation membership and access permissions;
• authentication information supplied by WorkOS, Microsoft or your organisation’s identity provider;
• records of invitations, sign-ins and account administration;
• details of factsheets, surveys and files you request, view or download;
• where you use the map’s “Upload Search Area” tool, the approximate centre of the area you searched and how many surveys it matched — see Search areas you upload below;
• the date and time of access, IP address, browser or device information, and security logs;
• correspondence and support enquiries; and
• any other information you choose to provide to us.

We do not receive your Microsoft or corporate identity-provider password.

Information may come directly from you, from your employer or client organisation, from an identity provider, or from your use of GeoVault.

Search areas you upload

The map lets you upload a KML or KMZ file of an area — typically your own licence block or area of interest — to see which surveys intersect it. We understand that such a file is commercially sensitive, and the tool is built so that we do not receive it.

Your file is opened and read entirely within your browser. It is not uploaded to GeoVault, and no part of its shape, size or extent is transmitted to us.

What we do record, at the moment you run the search, is:

• the approximate centre of the area you searched, rounded to the nearest 0.1 of a degree (roughly 11 kilometres) before it leaves your browser, so that the precise location is never transmitted; and
• how many surveys the area matched.

We do not record the file, its name, the shape of your area, or its size. This record is not linked to your IP address, your account, or any of your other searches, and nothing in it identifies you or your organisation.

We use this only to understand which regions of the world our visitors are interested in, so that we can prioritise which survey data to make available. The rounding is deliberately coarse enough to indicate a basin or region, and not fine enough to identify a particular licence block.

After a search has run, we offer an optional form headed “Ask us about this area”. The search works whether or not you use it, and nothing above changes if you ignore it. If you do complete it, we additionally record the name, email address and consent you provide, together with the same rounded location, the number of surveys your area matched and their GeoVault IDs, so that we can reply to you. We also keep your IP address and browser information against that enquiry to limit abuse of the form.

Completing that form does not give us your polygon or your file name. It tells us who you are and roughly where you were looking — nothing more precise than the anonymous record described above.

4. How and why we use information

Where optional consent is used, you may withdraw it at any time without affecting earlier lawful processing.

Providing certain information is necessary to create an account, verify an entitlement or release a gated download. If you do not provide it, we may be unable to provide that feature.

GeoVault does not currently use personal information to make solely automated decisions that have legal or similarly significant effects.

5. Who we share information with

We may share personal information where necessary with:

• WorkOS, which provides account authentication and organisation management;
• Microsoft or another identity provider selected by you or your organisation;
• Supabase, which provides database and file-storage services;
• Vercel, which hosts the GeoVault website and application;
• Resend or another transactional-email provider;
• your employer, client organisation or authorised GeoVault administrator;
• professional advisers, insurers and auditors; and
• regulators, law-enforcement bodies or other parties where required by law.

We do not sell personal information.

6. International transfers

Some suppliers may process information outside the United Kingdom. Where required, we use an applicable adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard.

Contact us if you would like more information about the safeguards relevant to your information.

7. Retention

We retain personal information only for as long as reasonably necessary for the relevant purpose, including contractual, security, licensing and legal requirements.

Our retention periods are:

• account and organisation records: while the account is active and for up to six years afterwards;
• licensed-file access records: for up to six years after access or the relevant customer agreement ends;
• factsheet enquiries: up to two years, unless they become part of a customer relationship;
• routine technical logs: normally between 30 days and 12 months; and
• support and contractual correspondence: up to six years.

8. Cookies

GeoVault uses cookies that are necessary for authentication, session security and operation of the service, including its secure WorkOS session cookie.

These cookies are not used for advertising. Blocking them may prevent sign-in or access to protected information.

GeoVault does not currently use optional advertising, tracking or product-analytics cookies. If that changes, this notice and the website’s consent controls must be updated before those cookies are placed. Strictly necessary security and session cookies generally do not require consent, but users must still be told about them. See the ICO cookie guidance.

9. Your rights

Depending on the circumstances, you may have the right to:

• request access to your personal information;
• ask us to correct inaccurate information;
• request deletion or restriction;
• object to processing based on legitimate interests;
• receive certain information in a portable format; and
• withdraw consent where processing relies on consent.

These rights are not absolute and may be subject to legal exceptions.

Contact info@metatek-group.com to exercise a right. We may need to verify your identity.

You may also complain to the Information Commissioner’s Office at ico.org.uk, although we would appreciate the opportunity to address your concern first.

10. Changes to this notice

We may update this notice when GeoVault or its data-handling practices change. The latest version will be published here with its revision date.

11. Contact