Privacy notice
Last updated: [date]
This notice explains how [Company name] collects and uses personal data through SHIELD and this website.
1. Who we are
[Company name] is registered in England and Wales under company number [company number], at [address]. We are registered with the ICO under number [ICO number].
2. Our role
For worker records held in SHIELD, our customer (your employer or principal contractor) is the controller and we are the processor. For this website and sales enquiries, we are the controller.
3. Data we collect
Contact details you give us, such as name, work email and company.
Worker data our customers add, such as competency cards, inductions, training records and site attendance.
Technical data such as IP address and device information, used to keep the service secure.
4. Lawful basis
We rely on legitimate interests for sales enquiries, contract for providing the service, and legal obligation where the law requires us to keep records.
5. Retention
We keep data in line with our retention schedule: [retention periods]. Customers set retention for their own worker records within legal limits.
6. Your rights
You can ask for access, correction, deletion, restriction or a copy of your data, and object to processing. Contact [privacy email]. You may also complain to the ICO at ico.org.uk.
7. International transfers
We host in the UK/EU. Where a sub-processor transfers data elsewhere, we use appropriate safeguards such as the UK International Data Transfer Agreement.