Privacy notice
Robert Welsh operates Lock Chimp. Contact Robert Welsh.
Postal address c/o Carter & Co 19 Warren Park Way Enderby Leicester LE19 4SA United Kingdom
What we collect
- Your SmartThings account identifier, access tokens, selected lock identifiers and lock labels.
- Compatibility diagnostics supplied by SmartThings, such as integration type, manufacturer and model identifiers, driver ID, hub ID, profile ID and capabilities.
- Your name, email address, listing settings and time zone when supplied by you or SmartThings.
- Guest or visitor names, optional recipient email addresses, access windows, encrypted PINs and the status of scheduled codes.
- Lock events reported by SmartThings, including keypad unlocks, code slots and unusual events.
- Payment records held by Stripe when you subscribe: customer and subscription identifiers, plan status and the email used at checkout. LockChimp does not receive or store card numbers.
We only collect a guest, cleaner or visitor email address when you choose to send that person a door code. Door-code emails contain the PIN by design. Operational logs and owner failure alerts do not.
Why we use it
We process account and lock data to provide the service under our contract with you. We process security logs and limited operational data for our legitimate interests in keeping LockChimp reliable and preventing misuse. Where law requires consent, we ask for it separately.
SmartThings and other providers
LockChimp sends commands to and reads data from Samsung SmartThings at your request. Hosting and email providers process data for us under their own security and data-processing terms. The current list is below.
Who processes your data
LockChimp currently uses the following providers.
- Render: application hosting, persistent database storage, network delivery and platform logs. Hosting region is configured in Frankfurt.
- Brevo or Resend: transactional email delivery when email notifications are enabled. Production may use either provider.
- Samsung SmartThings: authentication, device discovery, lock status, lock-code commands and device event history. SmartThings is also an independent service you choose to connect.
- Stripe: Checkout, receipts, invoices, payment-method storage and the customer portal. Stripe receives the email address used at checkout, plus billing details you enter there. Card numbers are handled by Stripe, not by LockChimp.
Questions about these providers should be sent to Robert Welsh.
Hosts and guest data
If you use LockChimp for a rental or business, you decide why guest and visitor data is entered. You are normally the controller for that data and LockChimp acts as your processor. Our data-processing terms apply.
Retention
We keep account data while your account is active. Expired schedules may be retained as history until you delete your account. Account deletion removes the account, schedules, events and stored lock records from the live database. Encrypted backups may retain deleted data for a limited operational recovery period.
Security
SmartThings tokens and stored PINs are encrypted at rest. Connections use HTTPS. Access is controlled by a signed, secure session cookie. No online service can eliminate every risk, so you must retain a backup method of entry.
Your choices and rights
You can turn notification types off, download an account export, disconnect SmartThings and delete your account from Settings. Depending on where you live, you may also have rights to access, correct, erase, restrict or object to processing, and to complain to the UK Information Commissioner or your local regulator.
Cookies
LockChimp uses only essential cookies for sign-in, security and your selected time zone. We do not currently use advertising or analytics cookies.
Changes
We will identify material changes in the app and ask you to accept revised terms where appropriate.