TermsPrivacyData processingCookiesDPIA template
Privacy policy
Last updated 22 October 2026
This policy explains how Joe Moore, trading as JobGate (“JobGate”), Swansea, Wales (full postal address on request), handles personal data. Email hello@jobgate.uk with any question. ICO registration: applied for.
Two different roles
- Workers, subcontractors and visitors who sign in on a site: the building firm running that site decides what's recorded and why. They are the controller; JobGate is their processor and only handles your data on their instructions. For questions about your site records, or to use your rights, contact that firm first. We'll help them respond. If you contact us, we'll pass your request to them.
- Our customers (the firms and their office users) and visitors to jobgate.uk: here JobGate is the controller, and the rest of this policy applies in full.
What we collect
| Who | What | Why (lawful basis) |
|---|---|---|
| Office users | Name, email, password (stored scrambled, never readable), role, the firm you work for, log-in activity | To provide the service under our contract with your firm (legitimate interests / contract) |
| Customer firms | Business name, phone, address, billing contact, plan and invoices. Card and bank details are held by Stripe, never by us | Contract; legal obligation (keeping accounts) |
| Site workers and visitors (processed for the firm) | Name, mobile number, company, sign-in and sign-out times, location at sign-in (only when the phone shares it), RAMS and document signatures, daily check answers, reports, photos and tickets you upload, device sign-in keys | Decided by the firm running the site, usually their legitimate interests in site safety and their legal duties under health and safety law |
| Everyone | IP address and basic technical details, kept briefly in logs and for limiting abuse (such as too many text codes) | Legitimate interests in keeping JobGate secure |
We don't sell personal data, we don't use it for advertising, and we don't use it to make automated decisions about anyone.
Location
When someone signs in on site, their phone may share its location once, at that moment, so the firm can see the sign-in happened on site. JobGate does not track anyone in the background or between sign-ins. If location is turned off, the sign-in still works and is flagged for the office.
Who we share it with
Only the service providers we need to run JobGate, under contracts that protect your data:
| Provider | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, file storage, security | Global network (incl. US) |
| Twilio Inc. | Sending text message sign-in codes | US |
| Stripe Payments Europe Ltd / Stripe, Inc. | Billing and payments (customer firm details only) | EU / US |
| Resend (Plus Five Five, Inc.) | Sending emails: invites, password resets, weekly records, alerts | US |
| Google LLC (Google Fonts) | Web fonts on office pages (sees the visitor’s IP address) | US |
Where data leaves the UK, it's protected by the UK's approved safeguards (an adequacy decision, the UK International Data Transfer Agreement, or standard contractual clauses with the UK addendum). We may also share data if the law requires it.
How long we keep it
- Site records are kept for as long as the customer firm's account is active, because they're the firm's health and safety records. The firm can delete jobs. After a firm cancels, records stay available for download for 30 days, then are deleted within 90 days.
- Billing records are kept for 6 years, as tax law requires.
- Text code records are kept for up to 30 days.
- Backups roll off within 30 days of deletion.
Keeping it safe
Data is encrypted in transit and stored with Cloudflare. Passwords are stored scrambled. Sign-in codes are checked and rate-limited. Signed records can't be quietly edited; changes are logged alongside the original. Access to customer data is limited to what's needed to run and support the service.
Your rights
You can ask to see, correct or delete your data, object to how it's used, ask us to restrict it, or ask for a copy to take elsewhere. For site records, contact the firm running the site (see above). For anything else, email hello@jobgate.uk. We'll reply within one month.
Complaints
If you're unhappy with how we've handled your data, email hello@jobgate.uk with “Data complaint” in the subject. We'll confirm we've received it within 30 days, look into it, and tell you the outcome without undue delay. If you're still not happy you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
Cookies
See our cookie notice. In short: only the essential ones needed to keep you signed in.
Changes
We'll update this page if anything changes, and email customers about material changes.