Privacy Policy

Privacy Policy

Last updated: October 2026

Who We Are

SiteJobs is operated by SiteJobs Ltd (Company No. 17288618), registered in England and Wales. Registered office: Unit 29 Highcroft Industrial Estate, Enterprise Road, Horndean, Waterlooville, Hants, PO8 0BT. We are the data controller for all personal data processed through this platform. For data protection queries, use the contact form.

What Personal Data We Collect

Workers:

• Full name
• Email address
• Phone number
• Postcode (stored as full postcode, displayed to employers as outward code only, e.g. HA8)
• Trade(s) and ticket type(s) (e.g. Crane Supervisor — CPCS Blue)
• Availability status (Available Now, 2 Weeks Notice, etc.)
• Right to Work self-declaration (yes/no) and the date of declaration
• Account password (stored as a hashed value, never in plain text)
• Email verification status
• TrustDPV username and cached trust score (if you choose to link your profile)

Employers:

• Full name
• Email address
• Phone number
• Company name (verified against Companies House)
• Companies House number
• Subscription plan and payment status (processed via Stripe)
• Company logo (if uploaded by Pro plan subscribers)
• Account password (stored as a hashed value, never in plain text)
• Email verification status
• TrustDPV username and cached trust score (if you choose to link your profile)

Share a Site (workers and employers):

• GPS coordinates at the moment you add or confirm a site (checked against a 150 metre radius, then not used again; we do not track your location)
• Site votes (category and thumbs up/down, tied to your account so you can change your vote)
• Site confirmations (site, date, and location at the time of confirming)
• Site reports (optional free-text reason)
• Main contractor names you enter when adding a site

What We Do NOT Collect

We do not collect or store workers' share codes or dates of birth. These are sensitive personal data required for Right to Work verification. Workers share these directly with employers when needed. SiteJobs never has access to, processes, or stores this information.

Lawful Basis for Processing

We process your personal data under the following lawful bases as defined by UK GDPR:

• Contractual necessity (Article 6(1)(b)): Processing your data to provide the SiteJobs service — connecting workers with employers, displaying profiles, and facilitating contact.
• Legitimate interests (Article 6(1)(f)): Companies House verification, TrustDPV integration, platform security, and fraud prevention.
• Consent (Article 6(1)(a)): Momentary GPS capture in Share a Site when you choose to add or confirm a site. Each capture happens only when you take that action, and you can use the rest of SiteJobs without ever sharing location.
• Consent (Article 6(1)(a)): Email verification, TrustDPV profile linking, optional Right to Work self-declaration, and GPS location sharing during check-in/check-out.
• Legal obligation (Article 6(1)(c)): Where we are required to retain data by law.

How We Use Your Data

GPS Site Attendance: When a worker checks in or out, their GPS coordinates are captured to verify their presence at or near the site postcode. This data is used to:

• Calculate the distance between the worker and the site at check-in and check-out
• Display attendance records to the employer on the attendance dashboard
• Generate CSV and PDF timesheet exports for payroll
• Flag late check-ins based on the employer's configured start time

GPS location is captured only at the moment of check-in or check-out. SiteJobs does not track workers' locations continuously or in the background. Workers may decline to share GPS and still check in, but no distance will be recorded.

• To create and manage your account
• To display your profile to other users (workers to employers, employers to workers)
• To facilitate direct contact between workers and employers
• To verify employer companies against Companies House
• To process subscription payments via Stripe
• To send account-related emails (verification, password reset)
• To send trial reminder emails to employers on the 30 Days Free plan
• To maintain platform security and prevent fraud

Who We Share Your Data With

Between users: Worker profiles are visible to verified employers. Employer company names and job listings are visible to workers. Phone numbers are shared to enable direct contact — this is the core purpose of the platform.

Companies House: Employer Companies House numbers are sent to the UK Companies House API for verification. We receive back the company status and registered name.

TrustDPV: If you link a TrustDPV profile, we query the TrustDPV API to verify your username exists and retrieve your trust score. This data is cached on our servers.

Stripe: Payment processing for employer subscriptions is handled by Stripe. We do not store card details — Stripe processes them directly. See Stripe's privacy policy.

We do not sell your data. We do not share it with advertisers.

Data Retention

Attendance records: Check-in and check-out records, including GPS coordinates, distances, and hours worked, are retained indefinitely. These records constitute attendance and payroll evidence and may be required for dispute resolution, HMRC compliance, or Working Time Regulations audits. Employers and workers should export and retain their own copies of timesheet data.

Share a Site data: Sites, votes, confirmations, and reports are retained for the lifetime of the platform as community content. Votes and confirmations are linked to your account only to prevent duplicates and abuse; they are displayed publicly as aggregate counts only, never with your name. If you delete your account, your identifying data is removed and your past votes remain as anonymous counts.

We keep your data for as long as your account is active. If you delete your account, your personal data is removed from our database.

Data Storage and Security

All data is stored on servers located in the United Kingdom. All data in transit is encrypted using HTTPS/TLS. Passwords are hashed using bcrypt and are never stored in plain text. We take reasonable technical and organisational measures to protect your data, but no system is completely secure.

Right to Work data: We only store a worker's self-declaration (yes/no) and the date of that declaration. We do not store share codes or dates of birth at any point.

International Transfers

Your data is stored and processed within the United Kingdom. We do not transfer personal data outside the UK. If this changes, we will update this policy and ensure appropriate safeguards are in place.

Cookies

We use essential cookies only: session cookies to keep you logged in, and security cookies (Cloudflare Turnstile) to prevent spam and bot submissions. We do not use tracking cookies, advertising cookies, or third-party analytics. See our Cookie Policy for details.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of all personal data we hold about you
• Right to rectification: Ask us to correct inaccurate or incomplete data
• Right to erasure: Request deletion of your account and personal data
• Right to restrict processing: Ask us to limit how we use your data in certain circumstances
• Right to data portability: Receive your data in a structured, commonly used format (e.g. JSON)
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent (e.g. TrustDPV linking, Right to Work self-declaration)
• Right to object: Object to processing based on legitimate interests

To exercise any of these rights, use the contact form. We will respond within 30 days.

Data Controller

SiteJobs.co.uk is registered with the Information Commissioner's Office (ICO). Registration number: ZC214044.

Data Breaches

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and will notify you directly without undue delay.

Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to This Policy

We may update this privacy policy. The "Last updated" date at the top reflects the most recent revision. Continued use of SiteJobs after changes constitutes acceptance of the updated policy.

Contact

For any data protection queries, use the contact form.