Privacy Policy

Who we are

Secure The Job is a business service provided by Mark Woolfe, a sole trader trading as Secure The Job. Mark Woolfe is the data controller for account, billing, support and website information described in this policy.

Business correspondence address: 23 Clapton Grove, Birmingham, B44 0QJ, United Kingdom. This is a correspondence address only and is not open to visitors. For privacy questions or requests, contact support@securethejob.co.uk.

Information we collect

Depending on how you use the service, we may process:

• your name, email address, business details, working hours and service preferences;
• account, sign-in, security and support information;
• customer and lead details you add or receive, including names, telephone numbers, addresses, job descriptions, messages and photos;
• job, calendar, customer and invoice records created in your workspace;
• call and text-message routing information where missed-call recovery is enabled;
• signed recovery-number agreements, deposit and refund records, removal confirmations and a one-way hash of the network address used to accept the agreement;
• subscription status, billing cycle and limited payment details supplied by Stripe, such as card brand, last four digits and expiry date; and
• device, browser, IP address, activity and diagnostic information needed to operate, secure and troubleshoot the service.

Secure The Job does not receive or store your full card number or card security code.

Why we use information

• To perform our contract: create and administer your account, provide requested features, process subscriptions and respond to support requests.
• For our legitimate interests: secure the service, prevent fraud and misuse, diagnose faults, improve reliability and keep appropriate business records, where those interests are not overridden by your rights.
• To comply with law: meet tax, accounting, legal and regulatory duties and respond to lawful requests.
• With consent: where the law requires consent, including for any future non-essential cookies or optional marketing. You may withdraw consent at any time.

Your customers’ information

Your business is normally the data controller for personal information about customers, leads and contacts that you place in Secure The Job. Secure The Job acts as your data processor for that information and processes it only to provide, secure and support the service, on your documented instructions and as required by law.

You must have a lawful basis for using that information, provide any required privacy notice, keep it accurate, avoid uploading unnecessary or unlawful information, control access to your workspace and respond to data-rights requests. You should not use Secure The Job to store special-category or criminal-offence information unless it is genuinely necessary and you have satisfied the additional legal requirements.

Our processor commitments

For customer information we process on your behalf, we will use people subject to confidentiality duties, apply appropriate technical and organisational security, require relevant service providers to protect the information, assist reasonably with data-rights requests and security obligations, notify you without undue delay after becoming aware of a personal-data breach affecting your workspace, and delete or return information at the end of the service subject to lawful retention and backup cycles.

You authorise us to use the service providers identified below as sub-processors. We remain responsible for requiring them to protect personal information consistently with applicable UK data-protection law. Contact us if you reasonably require further information for your own compliance duties.

Service providers and sharing

We use providers needed to operate the service, including Cloudflare for hosting and storage, Supabase for account authentication, Stripe for subscriptions and payments, Twilio for calling and messaging, Resend for transactional email, and Google Workspace for support email. We may also share information with professional advisers, regulators, courts, law-enforcement bodies or a purchaser of the business where lawful and necessary. We do not sell personal information.

International transfers

Some providers may process information outside the United Kingdom. Where UK law requires a transfer safeguard, we rely on an applicable UK adequacy regulation, the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, together with any additional protections considered necessary.

How long we keep information

Account and workspace information is generally kept while your account is active. Where an account reaches three suspensions and is placed into pending deletion, its workspace information is normally preserved for a 14-day recovery period so the business can contact us about restoration or obtaining its information. If the account is not restored during that period, its active workspace content is permanently deleted. Other closed accounts are generally removed within 90 days, although encrypted backups may remain until overwritten through normal backup cycles. Billing, transaction, signed recovery-number agreement, deposit, refund and removal-confirmation records may be retained for up to six years after the relevant financial year, and security, support or dispute records may be kept for as long as reasonably needed to protect legal rights and meet legal duties. We delete or anonymise information when it is no longer required.

Security

We use access controls, authentication, encryption in transit, managed infrastructure and operational safeguards appropriate to the nature of the information. No online service can promise absolute security. You are responsible for using a strong, unique password, protecting access to your email and devices, and promptly reporting suspected unauthorised access.

Cookies and local storage

Secure The Job uses strictly necessary cookies and browser storage to keep you signed in, protect your account, retain essential workspace state and provide requested features. These do not require consent where they are strictly necessary. We will provide choices and request consent before using non-essential advertising, analytics or tracking technologies.

Your rights and complaints

UK data-protection law may give you rights to access, correct or erase your personal information, restrict or object to its use, and receive certain information in a portable format. You may withdraw consent where consent is the legal basis. These rights can depend on the circumstances and lawful exemptions.

Contact support@securethejob.co.uk to make a request. We may need to verify your identity and will normally respond within one month. If your request concerns information held in one of our customers’ workspaces, contact that business first because it is the controller. You may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Changes to this policy

We may update this policy as the service or law changes. Material changes will be shown here and, where appropriate, communicated through the service or by email.