Privacy Policy

Privacy Policy

Last updated: May 2026

Who We Are

SiteJobs is operated by Gabriel Manole, sole trader, trading as sitejobs.co.uk. We are the data controller for all personal data processed through this platform. For data protection queries, use the contact form.

What Personal Data We Collect

Workers:

• Full name
• Email address
• Phone number
• Postcode (stored as full postcode, displayed to employers as outward code only, e.g. HA8)
• Trade(s) and ticket type(s) (e.g. Crane Supervisor — CPCS Blue)
• Availability status (Available Now, 2 Weeks Notice, etc.)
• Right to Work self-declaration (yes/no) and the date of declaration
• Account password (stored as a hashed value, never in plain text)
• Email verification status
• TrustDPV username and cached trust score (if you choose to link your profile)

Employers:

• Full name
• Email address
• Phone number
• Company name (verified against Companies House)
• Companies House number
• Subscription plan and payment status (processed via Stripe)
• Company logo (if uploaded by Pro plan subscribers)
• Account password (stored as a hashed value, never in plain text)
• Email verification status
• TrustDPV username and cached trust score (if you choose to link your profile)

What We Do NOT Collect

We do not collect or store workers' share codes or dates of birth. These are sensitive personal data required for Right to Work verification. Workers share these directly with employers when needed. SiteJobs never has access to, processes, or stores this information.

Lawful Basis for Processing

We process your personal data under the following lawful bases as defined by UK GDPR:

• Contractual necessity (Article 6(1)(b)): Processing your data to provide the SiteJobs service — connecting workers with employers, displaying profiles, and facilitating contact.
• Legitimate interests (Article 6(1)(f)): Companies House verification, TrustDPV integration, platform security, and fraud prevention.
• Consent (Article 6(1)(a)): Email verification, TrustDPV profile linking, and optional Right to Work self-declaration.
• Legal obligation (Article 6(1)(c)): Where we are required to retain data by law.

How We Use Your Data

• To create and manage your account
• To display your profile to other users (workers to employers, employers to workers)
• To facilitate direct contact between workers and employers
• To verify employer companies against Companies House
• To process subscription payments via Stripe
• To send account-related emails (verification, password reset)
• To maintain platform security and prevent fraud

Who We Share Your Data With

Between users: Worker profiles are visible to verified employers. Employer company names and job listings are visible to workers. Phone numbers are shared to enable direct contact — this is the core purpose of the platform.

Companies House: Employer Companies House numbers are sent to the UK Companies House API for verification. We receive back the company status and registered name.

TrustDPV: If you link a TrustDPV profile, we query the TrustDPV API to verify your username exists and retrieve your trust score. This data is cached on our servers.

Stripe: Payment processing for employer subscriptions is handled by Stripe. We do not store card details — Stripe processes them directly. See Stripe's privacy policy.

We do not sell your data. We do not share it with advertisers.

Data Retention

We keep your data for as long as your account is active. If you delete your account, we will remove your personal data from our live database within 30 days, except where we are required to retain it by law (e.g. financial records). Anonymised or aggregated data may be retained for analytical purposes.

Data Storage and Security

All data is stored on servers located in the United Kingdom. All data in transit is encrypted using HTTPS/TLS. Passwords are hashed using bcrypt and are never stored in plain text. We take reasonable technical and organisational measures to protect your data, but no system is completely secure.

Right to Work data: We only store a worker's self-declaration (yes/no) and the date of that declaration. We do not store share codes or dates of birth at any point.

International Transfers

Your data is stored and processed within the United Kingdom. We do not transfer personal data outside the UK. If this changes, we will update this policy and ensure appropriate safeguards are in place.

Cookies

We use essential cookies only: session cookies to keep you logged in, and security cookies (Cloudflare Turnstile) to prevent spam and bot submissions. We do not use tracking cookies, advertising cookies, or third-party analytics. See our Cookie Policy for details.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of all personal data we hold about you
• Right to rectification: Ask us to correct inaccurate or incomplete data
• Right to erasure: Request deletion of your account and personal data
• Right to restrict processing: Ask us to limit how we use your data in certain circumstances
• Right to data portability: Receive your data in a structured, commonly used format (e.g. JSON)
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent (e.g. TrustDPV linking, Right to Work self-declaration)
• Right to object: Object to processing based on legitimate interests

To exercise any of these rights, use the contact form. We will respond within 30 days.

Data Controller

SiteJobs.co.uk is registered with the Information Commissioner's Office (ICO). Registration number: ZC131307.

Data Breaches

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and will notify you directly without undue delay.

Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to This Policy

We may update this privacy policy. The "Last updated" date at the top reflects the most recent revision. Continued use of SiteJobs after changes constitutes acceptance of the updated policy.

Contact

For any data protection queries, use the contact form.