Privacy Policy

1. Data we collect

• Account information: Name, email address, and role (admin or staff) when you are invited to the platform.
• Project data: Project names, addresses, job codes, and site coordinates used for geofencing.
• Time and attendance: GPS-verified clock-in and clock-out timestamps.
• Task and site records: Task descriptions, completion photos, site notes, material notes, and purchase orders.
• Usage data: Device type, browser, and interaction logs used for security and service improvement.

2. How we use your data

• To provide and maintain the Service, including clock-in verification and project tracking.
• To generate daily site reports, analytics, and payroll-exportable time logs.
• To communicate with you about your account, projects, and support requests.
• To ensure the security, integrity, and compliance of the platform.

3. Legal basis for processing

We process your personal data under the GDPR on the following bases:

• Contract: Processing necessary to deliver the Service you have requested.
• Legal obligation: Retaining records where required by Irish or EU law.
• Legitimate interests: Security monitoring, fraud prevention, and service improvement.
• Consent: Where you have explicitly agreed, e.g. optional analytics.

4. Data storage and security

SITENasc is built on enterprise-grade infrastructure that maintains SOC 2 Type II and ISO 27001 certifications. Data is encrypted in transit and at rest. Access to your data is restricted through role-based access controls and is limited to authorised personnel who require access to operate and support the Service.

We follow a shared responsibility model: the underlying platform provides certified secure infrastructure, and we implement strict access controls, encrypted data handling, and GDPR-aligned practices at the application level.

5. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, including legal, accounting, and reporting requirements. Project, time, and task records are retained for the duration of your subscription and for a reasonable period thereafter to support audit and dispute resolution. You may request deletion of your data at any time (see Section 7).

6. Data sharing

We do not sell your personal data. We may share data with:

• Service providers: Infrastructure and hosting partners that support the operation of the Service, under appropriate data processing agreements.
• Legal authorities: Where required by law, court order, or to protect the rights, property, or safety of SITENasc, our users, or others.

7. Your rights under GDPR

You have the following rights regarding your personal data:

• Right to access the personal data we hold about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”), subject to legal retention obligations.
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the Data Protection Commission (DPC) of Ireland.

To exercise any of these rights, contact us at michael@sitenasc.com.

8. International transfers

Your data is primarily processed and stored within the European Union. Where any data is processed outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Cookies

SITENasc uses essential cookies to operate the Service and provide secure authentication. We do not use third-party advertising cookies. Any non-essential cookies are used only with your consent and can be withdrawn at any time.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the “Last updated” date above.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at michael@sitenasc.com.