Lookout
Privacy notice
Version 2026-09-05 · Showgrounds Shopping Centre, Clonmel
What Lookout is
Lookout is an incident log for the shops in the centre. Shop staff record thefts, attempted thefts, suspicious behaviour, aggression, refund fraud and damage as they happen, so that security and the other shops know, and so that the centre can give the Gardaí an accurate weekly picture.
Who is responsible
The data controller for incidents logged at the Showgrounds is Showgrounds Shopping Centre Management CLG, Showgrounds Shopping Centre, Clonmel, Co. Tipperary. Contact for anything in this notice: centrewebdev@outlook.com. Each shop remains responsible for its own dealings with the Gardaí.
What is recorded
- What happened: the type of incident, a short description, the shop, the time, and an estimated value.
- Appearance only: a description of the person or people involved, such as clothing, build or age range. Lookout does not record names, does not guess identities, and has no facial recognition.
- Vehicles: registration, make, model and colour where relevant.
- Photos of goods or the scene taken by shop staff. Shop staff are told not to photograph faces.
- CCTV stills, which may show a person. Only centre security and management can add or see these. Shops never can.
- Whether the shop reported the incident to the Gardaí, and the Garda PULSE reference if it did.
Why, and on what basis
The centre and its tenants have a legitimate interest in preventing and detecting crime on the premises and in keeping staff safe (GDPR Article 6(1)(f)). Where an incident is reported to the Gardaí, the record supports that complaint. Information is shared with An Garda Síochána for the prevention, investigation and prosecution of criminal offences.
Who can see it
- Staff of shops in the centre who have a Lookout account can see the incidents logged at this centre.
- Centre security and management can see everything at this centre, including CCTV stills.
- The Garda liaison receives a weekly brief: totals, patterns, repeat descriptions and vehicles, and the incident log for the week. The brief is shared by a private link.
- Nobody outside this centre. Other centres using Lookout cannot see this centre's data.
How long it is kept
Incidents that are not kept on file for the Gardaí are deleted automatically 90 days after they happened, together with their photos, descriptions and vehicle details. Incidents kept on file for a Garda complaint are retained for 24 months from when they happened, then deleted the same way. Weekly briefs are kept as the centre's record of what was passed on.
Your rights
If you believe Lookout holds information about you, you can ask to see it, ask for it to be corrected or deleted, or object to it being processed. Contact centrewebdev@outlook.com. You can also complain to the Data Protection Commission (dataprotection.ie). Because descriptions are of appearance only, we may need details from you to find the relevant record.
If you use Lookout as shop staff
We hold your name, email address, shop and role so the app works and so your entries are attributed. If you turn on alerts, a push-notification subscription for your phone is stored. When you leave, the centre manager removes your access; your past entries remain on the record. You can reset your password from the sign-in screen.
Where it is stored
Lookout runs on Supabase (database and file storage, EU region, Ireland) and Vercel (application hosting). Sign-in emails and the weekly brief are sent through Resend from lookout@lookoutcentre.com, using its EU region. When something goes wrong in the app, a technical error report (what failed and where in the code, never the incident text, your name or your device's address) goes to Sentry, also in its EU region. Data is stored and processed in the EU.