Privacy policy
Temporary Works Consulting & Design Ltd (Company No. 17198188) — data controller. Last updated: 26 July 2026.
What we collect, and why
| Data | Where | Purpose | Lawful basis | Retention |
|---|---|---|---|---|
| Name, company, email, phone, enquiry details | Quote and access-request forms (Netlify Forms) | Responding to your enquiry | Legitimate interests (responding to a request you made) | Deleted when no longer needed for the enquiry or any resulting engagement |
| Username and scrypt-hashed password, account status | Sign-in service (Netlify Blobs) | Operating your licence | Contract | Life of the subscription plus a short deletion window |
| Billing details | Stripe (we never see card numbers) | Subscription payment | Contract | Per Stripe's retention; see Stripe's privacy policy |
| Security event log (username, IP, event, outcome) | Audit log (Netlify Blobs) | Protecting accounts; investigating misuse | Legitimate interests (security) | 24 months |
| Usage analytics | Google Analytics, loaded only after consent via our consent tool | Understanding site use | Consent | Per the analytics retention setting |
Your SHEQ records are not our data
Records you create in SHEQ System (registers, documents, photographs) are stored in your browser on your device, not on our servers. We cannot read, back up or restore them — export a backup from Settings & data. This is a design property of the current edition and is stated before purchase.
Sharing
Processors we use: Netlify (hosting, forms, data stores), Stripe (payments), Google (analytics, after consent). We do not sell personal data, and we send no marketing without your consent.
Your rights
You have the UK GDPR rights of access, rectification, erasure, restriction, portability and objection. Email david@temporaryworksconsulting.com; we respond within one month. You can complain to the ICO (ico.org.uk) at any time.