Privacy Policy

The other fun bit

One.site is the trading name of One.site Global Limited ("One.site", "we", "us"). We are a company registered in England under company number 12376915. Our registered office is at Cody Technology Park, Farnborough, GU14 0LX.

One.site is committed to protecting the privacy and security of everybody whose personal data we process. We acknowledge the need to protect personal data that is collected by or disclosed to us and to manage it in accordance with the Data Protection Act 2018 and EU General Data Protection Regulation 2016/679 (GDPR) now incorporated in the 2018 Act as the “UK GDPR”).

The purpose of this notice is to inform you how we collect and use (process) personal data during and after your relationship with us, in accordance with such data protection laws.

The basis on which we process personal data

One.site is a cloud based collaborative solution which it offers to its customers in the construction industry. It enables them to create editable databases of personal data such as professional certification and relevant health information of workers (operatives/contractor administrators) and visitors to construction sites which are securely shared with our customers for purposes such as mandatory record keeping, health and safety training and site clocking in/out time management.

When an individual data subject signs up for an account with us, they provide their personal data and have access to edit that personal data thereafter. We are the controller for that information, and our lawful basis for processing it is to fulfil the contract we have with the data subject to provide our services.

We also provide services to our customers, such as construction companies, and data subjects will be able to authorise access to customers when they work on those customer sites. Data subjects can authorise access to more than one customer at once. Where our customers use data subject information to manage their sites, they will be data controllers for this processing, so it is important that data subjects read and understand our customers’ privacy notices.

If you have any questions regarding this privacy notice, our use of your personal data or wish to exercise any of your legal rights under data protection law, you can contact us by email dpo@ukconnect.com.

‍

How we obtain your data

If you are an operative, contractor administrator or a visitor to a construction site, some of the personal data that we process will be provided by you to us at the invitation of our relevant customer or directly by our customer. If you are an operative, contractor administrator or a visitor to a construction site, we may receive your name and email address from our customer. This information is used to send you an automated invitation to register on One.site and to authorise disclosure of your data that you have entered into One.site to our customer. Your data will only be accessible by our customer where you have explicitly authorised this. Please help us to keep your information up to date by regularly checking in to your account and reviewing the data held.

What data do we capture

You will only ever need to provide the minimum personal data required to fulfil the task in hand. On behalf of our customers, we would only process some or all the following personal data:

• Your name and where relevant job title
• Contact information, for example telephone numbers, email address and postal address
• Uploaded copies of professional qualifications/certification
• CSCS card
• Next of kin and their contact information (telephone number and address)
• Emergency contact information if different to next of kin
• Relevant medical history
• Training record
• Only your name and email address are required to create a One.site account.

How we use your data and our lawful basis for processing

We will only use your personal data where the law allows us. This is likely to be limited to the following examples.

• When responding to your enquiry, for example taking steps to entering into a contract with you. We are the data controller of this data.
• When you register as a user of One.site and enter into a contract with us. We are the data controller of this data (limited to your name and email address).
• To carry out our obligations arising from any contracts entered in to by you, your company and us.
• To enable you to store and share documents and information for the purpose of contracting. Where you provide authorisation to one of our customers for the purposes of working on their site, our customer will be the controller for your personal data in relation to their sites.
• For the provision of health and safety and other training provided by our customers. Our customers will be the controller for this information.
• Where a construction company uses the time management, clocking in/out feature, the construction company will be the controller.
• To allow a construction company to send you an invitation to use One.site and/or, with your express permission, allow them access to your data.
• For our own internal record keeping where there is either a legal requirement for us to do so or where it is in our legitimate interest.
• To seek your views or comments on the services we provide as part of the contract you have entered in to but only where it is in our legitimate interest to do so.
• To contact you with information about company updates, services, offers and other things we think might be relevant to you where it is in our legitimate interest to do so or where you have consented to the processing.

Disclosure of your data

We will only ever disclose your personal data to a third party where you have authorised us to do so. We may also disclose your data where we are required to do so by law. We may also pass your information to our auditors and other associated organisations for the purpose of regulatory compliance. When using third party service providers we only disclose the personal data that is necessary for them to help to deliver the service, which we balance carefully with respect to your rights. We have a contract in place that requires them to keep your information secure and prohibits them from using your data for their own purposes. All third parties are subject to a duty of confidentiality.

Security of your personal data

We undertake regular IT security and data protection auditing to ensure our systems meet the expectations of the law and those of our clients. Those of our employees and suppliers who have access to personal data are required to undertake data protection training.

Transfers of data outside of the EEA

One.site is hosted on UK servers. Some of our system development and technical support is undertaken by a partner located in the Philippines. They do not routinely process personal data, but personal data is stored on the systems they support and develop. We have a compliant contract in place with our partners, and an International Data Transfer Agreement is in place to protect your rights and freedoms during processing as part of that contract.

How long we keep your personal data

We will retain your personal data as long as is necessary as our customers need to keep them in accordance with their own data protection procedures. We may need to retain some information to comply with our legal obligations such as financial and accounting records. Unless there is an ongoing business relationship, we will only retain your personal data for 7 years after your account is closed.

Your rights in respect of your personal data

You have a number of rights under data protection law. In summary these include:

• Subject Access - you have the right to request details of the personal data which we hold about you and a copy of that data. You may ask us for a copy of the data we hold, but as our customers are also data controllers for the personal data, they process data related to the sites they operate, you may also approach them to make a subject access request.
• Data Portability – you may, in certain circumstances request us to provide with a copy of your data for transfer to another organisation. In view of the services we offer, it is unlikely that this right would be relevant to our data relationship with you
• Rectification – we want to ensure that the personal data we hold is accurate and up to date. If you believe that any data we have about you is incorrect or incomplete, please let us know. To the extent required by applicable laws, we will rectify or update any incorrect or inaccurate personal data about you. You have access to your user profile and have access to update that profile at any time.
• Erasure ('right to be forgotten') - you have the right to have your personal data 'erased' in certain specified situations
• Restriction of processing – you have the right in certain specified situations to require us to stop processing your personal data and to only store such personal data
• Object to processing – You have the right to object to specific types of processing of your personal data, for example, where we are processing your personal data for the purposes of direct marketing
• Prevent automated decision-taking – in certain circumstances, you have the right not to be subject to decisions being taken solely on the basis of automated processing

To exercise any of these rights or if you have any questions about our Privacy Notice, please contact our Data Protection Lead using the contact details provided at the top of this notice.

You should also be aware that these same rights apply in respect of any third- party construction company we may have disclosed your data to at your request. You would need to contact those organisations directly should you wish to exercise any of your rights.

While we hope to be able to resolve any concerns you have about the way that we are processing your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been processed in a way that does not comply with the GDPR or have any wider concerns about our compliance with data protection law. You can do so by calling the ICO helpline on 0303 123 1113 or via their website https://ico.org.uk/.

‍

Changes to the privacy policy

We keep our privacy notices under regular review. This notice was last updated on 25^th February 2026.