Privacy Policy

This Privacy Policy explains how Site Control collects, uses and protects your personal data when you use our platform. We act as the Data Controller under the UK GDPR.

1. Data we collect

• Account details — name, email, phone number, role.
• Organisation details — company name, address, billing details.
• Worker activity — GPS check-in locations, check-in times, task completions, document acknowledgements, incident reports.
• Device information — browser type, operating system, and IP address for security and diagnostic purposes.

2. How we use your data

• To provide the Service and its features.
• To communicate with you about your account and the Service.
• To improve Site Control and develop new features.
• To comply with our legal obligations.

We do not sell your data. Full stop.

3. Where your data lives

All Site Control data is hosted in the United Kingdom. Payments are processed by Stripe. Transactional emails are sent via Resend.

4. Your rights

Under UK GDPR you have the right to access, correct, delete and export your personal data, and to object to how we process it. Contact privacy@sitecontrol.uk to exercise any of these rights.

5. Retention

We keep account data for as long as you have an active subscription, plus a grace period after cancellation to support reactivation. Workers’ compliance records (signed documents, check-ins) are retained for at least 7 years in line with UK construction industry recommendations.

6. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Passwords are hashed with bcrypt. Document integrity is verified via SHA-256.

7. Contact

Questions about this policy? Email privacy@sitecontrol.uk.

This is a placeholder. Full, formally-drafted Privacy Policy will be published here before general availability.