Privacy Policy
Placeholder. This outline describes the intended position and must be reviewed and completed by a qualified adviser before launch. See docs/WEBSITE_STATUS.md.
Who we are
FieldClear Ltd operates fieldclear.co.uk. For any question about this policy or about the personal data we hold, contact hello@fieldclear.co.uk.
What we collect
Information you give us
- Account details — name, work email address, company name and password (stored hashed, never in plain text).
- Workforce records you enter or import — worker names, roles, employment types, qualifications, expiry dates and the certificate files you attach.
- Correspondence — anything you send us by email or through support.
Information collected automatically
- Usage analytics — pages viewed, actions taken and referring source, used to understand how the product and site are used.
- Attribution parameters — UTM tags and click identifiers, so we can tell which marketing actually works.
- Technical data — IP address, browser and device type, collected in server and security logs.
Data about your workers
Where you upload records about your workers, you are the data controller and we act as your processor. You are responsible for having a lawful basis for holding that information and for telling your workers how it is used. We process it only to provide the service to you, and never for our own purposes.
How we use your information
- To provide the service — storing your records, calculating statuses and sending the expiry reminders you configure.
- To support you — responding to questions and diagnosing problems.
- To improve the product — understanding which features are used and where people get stuck.
- To bill you — processed through a third-party payment provider; we do not store card details.
- To meet legal obligations — accounting records and lawful requests.
Legal bases
We rely on performance of a contract for providing the service, legitimate interests for product improvement and security, consent for optional marketing communications, and legal obligation where the law requires retention.
Storage and security
- Each organisation's data is isolated from every other organisation's.
- Data is encrypted in transit and at rest.
- Access within your account is controlled by the user permissions you set.
- Data is hosted in the UK and EU.
- Access by our staff is limited to what is necessary for support and is logged.
We describe our practices rather than claiming certifications we do not hold. If we obtain a formal certification, we will name it here and it will be verifiable.
Retention
We keep your account data for as long as your account is active. After cancellation, data is retained for a limited period so you can export or reactivate, then deleted. You can request earlier deletion at any time.
Sharing
We do not sell personal data. We share it only with service providers who help us run the service — hosting, email delivery, payment processing and analytics — each under contract and only to the extent needed.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict or object to processing of your personal data, and the right to data portability. Contact us to exercise any of these. You also have the right to complain to the Information Commissioner's Office.
Cookies
See our cookie policy for what we set and why.
Changes
If we make material changes to this policy we will tell account holders by email before they take effect.