Legal
Privacy Policy
Last updated 14 November 2026
This policy explains how LabourCore ("we", "us") handles personal data when you use the LabourCore website at labourcore.com, the web app at app.labourcore.com, and the LabourCore apps for iOS and Android. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Questions about this policy or your data: [email protected].
1. Who we are
LabourCore is the controller of the personal data described here, except where a company using LabourCore uploads data about its own workforce. In that case the company is the controller and we process the data on its behalf.
2. What we collect
| Data | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email address, phone number, job title, company and role | You, when you register or are invited |
| Sign-in data | Password (stored only as a one-way hash), sign-in times | You and the app |
| Compliance records | Qualifications, cards, certificates and other documents you or your employer upload, with their expiry dates | You or your employer |
| Project and company activity | Briefs, schemes, deals, approvals and the audit record of who did what and when | Your use of the platform |
| Messages to us | Access requests, support and deletion requests | Forms on this website and email |
| Device and usage data | Device type, app version, push notification token, IP address, pages visited | The app, the website and our servers |
We do not ask for special category data (such as health or ethnicity). Please do not upload it.
3. Why we use it, and our lawful basis
- To provide the service (accounts, compliance records, matching companies to projects, notifications): performance of a contract.
- To keep the platform secure and keep a tamper-evident audit record: legitimate interests.
- To answer your messages and provide support: legitimate interests, or a contract where you are a customer.
- To understand how the website is used (aggregate analytics): legitimate interests.
- To meet legal obligations, such as keeping financial records: legal obligation.
We do not sell personal data and we do not use it for third-party advertising.
4. Who we share it with
Other users see your profile and compliance status only where it is needed for a project you are part of. We also use these service providers, under contract, to run LabourCore:
| Provider | Purpose | Location |
|---|---|---|
| Microsoft Azure | Hosting and document storage | UK (UK South) |
| Neon (on Amazon Web Services) | Database | UK (London) |
| Mailgun | Sending email | EU |
| Cloudflare | Domain name and network security | Global network |
| Ahrefs | Website analytics | EU / global |
| Apple and Google | App distribution and push notifications | Global |
Where data leaves the UK, it is protected by UK adequacy regulations or the International Data Transfer Agreement. We may also disclose data where the law requires it.
5. How long we keep it
- Account and compliance data: while your account is open, and deleted after you close it.
- Audit records other parties rely on: for the life of the project, with your details anonymised once you leave.
- Financial records: 6 years, as required by law.
- Support and website enquiries: up to 2 years.
6. Your rights
You can ask to access, correct, delete or receive a copy of your data, and you can object to or ask us to restrict how we use it. To delete your account, seeDelete your account. For anything else, email[email protected]. We reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
7. Cookies and analytics
The app uses essential storage to keep you signed in. This website uses Ahrefs Web Analytics to count visits; it does not use advertising cookies.
8. Security
Data is encrypted in transit (HTTPS) and at rest. Access is limited to the people who need it, and every change to a compliance record is logged.
9. Children
LabourCore is a business service and is not intended for anyone under 16.
10. Changes
If we change this policy we will update the date at the top of this page, and tell account holders by email about any significant change.