Legal
Privacy policy
What personal data ForestrPro uses, why, and for how long.
Last updated: 28 October 2026 (ICO registration, risk assessments)
Who we are
ForestrPro is provided by Chris Docherty, trading as ForestrPro, of 17 Drummossie Road, IV2 7AN, United Kingdom: the ForestrPro website, the ForestrPro Android app, and the server and web dashboard at forestrpro.com. For a business's own team data, the business is usually the controller and we process it on its behalf, as set out in Schedule 1 of the licence agreement. For anything about your data, email info@forestrpro.com.
We are registered with the Information Commissioner's Office (ICO), the UK's data protection regulator, as a data controller.
The website
- No cookies, no analytics, no advertising. The website doesn't set cookies, doesn't use analytics or tracking, and loads nothing from other companies: its fonts and images are served from forestrpro.com.
- Server logs. Like any website, the web server records requests (the address of the page, the time, your IP address and browser type) in its access logs. These are kept by our hosting provider for security and troubleshooting.
The contact form
When you send a message, we receive your name, email address, and the business, type of operation, enquiry type and message you enter. They are emailed to our mailbox so we can reply. They aren't stored on the website's server.
To stop abuse, the server keeps a one-way hashed record of your IP address and email address for up to a day, to limit how many messages can be sent. We keep your email for as long as we need to deal with your enquiry and any follow-up. Our lawful basis is our legitimate interest in answering enquiries.
The app, the server and the dashboard
Without an account, everything you record in the app stays on your phone. When you're signed in, your records are also kept on our server, so they're on your other devices and in the web dashboard; imported maps and GIS files stay on the phone unless you share them with a project. What reaches our server:
| What | Why | How long |
|---|---|---|
| Your account: email address, display name and password. The password is stored only as a secure hash (Argon2id), never in readable form. | To sign you in and show your name to your team | Until you delete your account (how) |
| Your profile, if you add it: job title, phone number, tickets (qualifications) and profile photo | Shown to the people in your teams, so they know who you are and how to reach you | Until you change or remove it (in the app or the dashboard) |
| A team's logo, added by its owner | Shown to the team's members | Until the owner changes or removes it, or deletes the team |
| Sign-ins: a random token for each signed-in device, stored only as a hash, with the device name you give | To keep you signed in | Until you sign out, or it expires after 90 days unused |
| Your plan and free trial: which plan your account is on, when its trial started and ends, and (once payments are taken) payment records from the payment provider | To provide the plan you chose and keep within its limits; ForestrPro's owner sees these, and accounts' names and emails, to run the service, and every action taken is logged with its reason | For as long as your account exists |
| Your records: forests and compartments, planting jobs with their species, rates, sessions and counts, vegetation records and inspections, surveys, pins, timber stacks, finished GPS tracks, drawings, map features, and photos of pins and inspections | So you have them on every device you sign in on and in the dashboard; a record you (or a manager) put in a team project is shared with that team | Until you delete them. Deleting your account erases those not in a team project; those in a team project stay with the team, shown as by a deleted member |
| Lone working: while you choose to work alone with check-ins, the times you check in, the position your device gives with each check-in or SOS, what you say you're doing, and the emergency contact you give (name, email, phone) | To alert your team's owners and managers, and your emergency contact, if you miss a check-in or press SOS. They see it; other members don't. Check-ins made with no signal are kept on your device until they can be sent | Kept with the team's lone working history. Deleting your account ends any session and erases your emergency contact's details |
| Risk assessments: what your team's owners and managers write or upload (including any names they put in them, such as an assessor or first aider), and your signature that you have read and understood each version: your name and when you signed | To share risk assessments with your team and keep a record of who has read them | Kept with the team's risk assessments, including archived ones, as a safety record. If you delete your account, your signatures stay with the name you signed with, but are no longer linked to an account |
| Tariffing surveys: trees with their measurements, positions and optional photos, sample plots, calculations, timber prices you enter, and a log of who changed what | To estimate standing timber volume for you or your team; a team survey is seen by the team's members | Until you delete them. Deleting your account erases surveys and prices not in a team; team surveys stay with the team |
| Team data: teams, members and roles, invitations, projects with site information, tasks with their history, notes and photos, planting job summaries, and map data shared with a project | To share work with your team, as the team features require | For as long as the team keeps it. Managers can archive projects; owners can delete the team |
| Location while sharing: the positions of a member who switches on location sharing, with accuracy and time | To show the team's owners and managers where members are, only while each member chooses to share | Deleted automatically after 30 days |
| Activity history: who did what in the team, and when | Accountability within the team, visible to owners and managers | For as long as the team exists |
| Password reset: a single-use link (stored only as a hash) emailed to you | To let you choose a new password | Expires after one hour |
Team data is visible only to members of that team, according to their role. Our lawful basis is providing the service you've asked for (contract).
Location is opt-in. Joining a team never shares your location. You start and stop sharing yourself: the app shows a notification while it's on, and the dashboard shows a bar with a Stop button and shares only while its page is open. The GPS tracks you record are separate: a finished track is kept with your records (private to you unless it's in a team project), and it's never shown as a live position.
Maps from OpenFreeMap
When the app or the dashboard shows an online base map, the map images are downloaded from OpenFreeMap (tiles.openfreemap.org), which receives your IP address as part of each request. Imported maps and offline use don't involve OpenFreeMap.
Online layers from your QGIS projects
If you import a QGIS project with web map layers (XYZ, WMS or WMTS), the app downloads their map images from the services named in the project while those layers are switched on, and each of those services receives your IP address as part of each request. They are chosen by you or whoever made the project, not by us; their own privacy terms apply. Their addresses stay on your phone and aren't sent to us. Switch a layer off or remove it under GIS import and export to stop it.
The dashboard
The dashboard keeps your sign-in in your browser's session storage for that tab only, and it's cleared when you close the tab, unless you tick Keep me signed in on this device: then it's kept in the browser's local storage until you sign out. No cookies are used.
The dashboard reads your device's position only when you ask it to: to place a record or a refill point, to show where you are on a map, to record a GPS track, or to share your location with your team. In the field it keeps some things in your browser's local storage until they're sent: changes made without a signal, a GPS track while it's being recorded, and a copy of the planting job you're working on. They stay on your device and are cleared once sent, or when you discard them. The dashboard also keeps its own pages (not your data) so it opens without a signal.
Who else handles data
- Our web hosting provider, which runs the server, the database and the mailbox.
- OpenFreeMap, for online map images, as described above.
- Map services named in a QGIS project you import, for its online layers, as described above.
We don't sell personal data or share it for advertising.
Security
Connections use HTTPS. Passwords, sign-in tokens, invitation codes and reset links are stored only as hashes. Every request is checked against the sender's role in the team, and sign-in attempts and other sensitive actions are rate-limited.
Your rights
You can ask for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and ask for your data in a portable format. You can change your display name and password yourself in the app or dashboard, and delete your account there at any time. Email info@forestrpro.com to exercise any of these rights. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).
Changes
If we change this policy, we'll update this page and the date at the top.