ZoneWatch Privacy Notice
Our ZoneWatch Privacy Notice was last updated on 2026-10-28.
ZoneWatch is a device-location service that Reef Cyber Security Inc. (“Reef Cyber Security,” “we”) operates for client organizations. It shows a client’s leadership where the client’s company-owned laptops are, and emails them when a laptop leaves its approved area.
This notice covers two groups of people:
- Console users: the client’s authorized staff and Reef Cyber Security staff who sign in to the ZoneWatch web console.
- Employees with monitored laptops: people who use a company laptop that their employer has enrolled in ZoneWatch.
Our general website privacy policy covers visits to reefcybersecurity.com. Where it differs from this notice, this notice applies to ZoneWatch.
Information we collect
About console users
- From Google sign-in: your name and email address. ZoneWatch uses Google sign-in only to confirm who you are. It does not read your email, contacts, files or any other Google account data, and it requests no access beyond basic sign-in.
- Activity records: when you sign in or out, and the changes you make in the console (for example, approving travel or changing a setting). Refused sign-in attempts record the email address that was tried.
- One strictly necessary cookie: a signed session cookie that keeps you signed in for up to 12 hours. ZoneWatch uses no advertising or analytics cookies.
About monitored company laptops
We receive this from the client’s device management system (SureMDM, by 42Gears):
- the laptop’s device name and model, and the name of the person it is assigned to;
- its approximate location, reported about every 30 minutes while the laptop is on and connected, usually accurate to a building or block;
- when it last checked in, and whether location services are on;
- whether its connection is going through a known VPN server. We record only which VPN server, never the laptop’s IP address.
ZoneWatch does not collect the content of anything on the laptop, and does not monitor personal devices.
How we use it
- To show authorized client staff where their company laptops are, and to email them when a laptop leaves or returns to its approved area.
- To filter out false locations, such as readings caused by VPN connections, so alerts are accurate.
- To alert Reef Cyber Security staff when a laptop stops reporting or the service has a problem.
- To keep the service secure, including the activity records described above.
We do not sell this information or use it for advertising.
Our role
We run ZoneWatch on behalf of each client organization and follow its instructions. The client decides which laptops are enrolled and who may see their locations, and is responsible for informing its employees. If you are an employee with questions about your laptop’s data, please contact your employer first; we will help them respond.
Service providers and sharing
ZoneWatch relies on these providers, each under its own privacy terms:
Provider | What it does for ZoneWatch |
|---|---|
42Gears (SureMDM) | The client’s device management system, which supplies laptop details and locations |
Sign-in for console users; the maps shown in the console (your browser loads map images from Google) | |
Amazon Web Services (Amazon SES) | Sends ZoneWatch alert emails |
ZoneWatch itself, including its database, runs on systems managed by Reef Cyber Security. Beyond these providers, we share information only with the client organization it belongs to, or when required by law.
How long we keep it
Information | Kept for |
|---|---|
Laptop location history | 90 days, then deleted automatically |
Alert history and console activity records, including sign-ins | 1 year |
Encrypted backups | Up to 30 days |
A client may ask us to delete its data sooner.
How we protect it
- Only people on the client’s approved list, plus designated Reef Cyber Security staff, can sign in to the console.
- Connections are encrypted (HTTPS), and backups are encrypted.
- Every sign-in and change in the console is recorded.
Your choices
- Employees: ask your employer about the location data held for your laptop, or about correcting or deleting it. We will help them respond. Location is recorded only while a company laptop is on and connected.
- Console users: you can ask us what is held about you, or to remove your access. Removing your access does not delete activity records, which are kept for the period above.
Changes to this notice
If we change this notice, we will update the effective date above. Clients will be told about material changes before they take effect.
Contact Us
If you have any questions about this notice, You can contact us:
- By visiting this page on our website: https://reefcybersecurity.com/contact/