Privacy Policy

Introduction

UrProject Ltd is committed to protecting your privacy and handling personal data responsibly.

This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK GDPR and Data Protection Act 2018. Our Data Protection Officer can be contacted at dpo@urproject.co.uk if applicable. This policy applies to all users and visitors.

Data We Collect

We may collect the following data:

• Personal identifiers: Name, contact details, account credentials
• Verification: ID documents, right-to-work proofs
• Professional: Qualifications, certifications (e.g., CSCS), which may include special category data (e.g., health)
• Usage: Availability, work preferences, logs, timesheets
• Communications: Messaging within the platform
• Technical: IP address, device/browser data

Special category data is processed only with explicit consent or where required by law. We may also collect aggregated usage statistics.

How We Use Your Data

We use your data to:

• Operate and maintain the platform
• Verify users and support trust
• Enable project access and workforce matching
• Generate records and audit trails
• Improve platform functionality and security
• Communicate updates and service information

We do not sell personal data. We do not use data for automated decisions with legal effect. Uses are limited to those necessary for service provision.

Lawful Basis for Processing

We rely on:

• Contractual necessity (e.g., account and platform access)
• Legal obligations (e.g., record-keeping for tax or health and safety)
• Legitimate interests (e.g., fraud prevention, platform improvement)
• Consent (where required, e.g., marketing, sensitive data)

You can withdraw consent at any time. We conduct balancing tests for legitimate interests.

Data Sharing

Data may be shared with:

• Other users where necessary for project delivery
• Verified service providers (e.g., cloud storage, compliance partners)
• Legal or regulatory bodies when required (e.g., HMRC)

Examples include AWS (cloud hosting) and identity verification services (e.g., Onfido). All parties are contractually bound to confidentiality and data security. We do not share data for marketing purposes without explicit consent. Sharing is minimised and protected by agreements.

Data Storage and Security

Data is stored securely in the UK/EEA using industry-standard encryption and access control. We regularly audit systems to ensure compliance.

If a data breach occurs, we will notify affected users and the ICO within 72 hours where required. Security measures include firewalls, encryption, and access logs.

Data Retention

We retain data only as long as necessary:

• Account data: Up to 7 years after account closure (legal/tax use, e.g., per HMRC requirements)
• Verification: 2 years from last activity
• Logs and records: 1–2 years for platform accuracy and security
• Legal, regulatory, or dispute-related data: As required by law

After expiry, data is securely deleted or anonymised. Retention is reviewed annually.

Your Rights

You have the right to:

• Access your data
• Rectify inaccurate data
• Request deletion (subject to legal exemptions). See our Account Deletion page for how to delete your account
• Restrict or object to processing
• Request data portability

Requests to: privacy@urproject.co.uk. We may require identity verification for requests.

Cookies and Analytics

UrProject uses cookies and similar technologies. Essential storage (your cookie choices themselves) is always active; everything else loads only with your consent, chosen through the cookie banner. You can change or withdraw your choices at any time via the Cookie Settings link in the footer.

Rejecting analytics does not affect your use of the site. The live chat widget requires functional consent; when you allow chat but reject analytics, we instruct HubSpot not to set its tracking cookies.

International Transfers

If data is transferred outside the UK (e.g., to US-based services), we use recognised safeguards such as IDTA or adequacy decisions. Transfers are assessed for risks.

Children’s Data

UrProject is for users 18+. We do not knowingly collect data from children. If discovered, we delete such data immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. Major changes will be communicated via platform or email. Continued use implies acceptance.

Contact

For privacy enquiries:

privacy@urproject.co.uk