In summary: we collect the personal data needed to run an installation platform — enquiries from our website, account details of platform users, job details needed to complete installations, and information about the engineers in our network. We never sell personal data. This policy explains what we collect, why, who we share it with, how long we keep it, and your rights under UK data protection law.
WorkTech Global Limited ("WorkTech", "we", "us") is a company registered in England and Wales, company number 15151466, and is part of the IWG Group of Companies. We operate the websites work-tech.info and work-tech.co.uk and the WorkTech installation and workforce management platform.
For most of the personal data described in this policy, WorkTech is the data controller. For end-customer data submitted by our retail and manufacturer partners for job fulfilment, we act as a data processor on the partner's behalf (see section 4).
Contact for privacy matters: info@work-tech.co.uk, or in writing to WorkTech Global Limited at its registered office.
| Purpose | Data | Lawful basis (UK GDPR) |
|---|---|---|
| Responding to enquiries and providing quotes | Contact form data | Legitimate interests (responding to business enquiries); steps prior to entering a contract |
| Providing the platform and managed installation services | Account, job, and engineer data | Performance of a contract; legitimate interests |
| Scheduling and completing installations, including contacting end customers | Job data | Processing on behalf of our partner (as processor); where controller, performance of a contract and legitimate interests |
| Vetting and paying engineers | Engagement data | Performance of a contract; legal obligation (e.g. tax records); legitimate interests (network quality and safety) |
| Quality management and dispute resolution | Job records, ratings, communications | Legitimate interests (evidencing work done, resolving complaints) |
| Invoicing, accounting, and tax compliance | Billing records | Legal obligation |
| Security, fraud and spam prevention | Technical data, honeypot and rate-limit records | Legitimate interests (protecting our systems) |
| Improving our services | Aggregated usage data | Legitimate interests (service development); data is aggregated or anonymised wherever possible |
| Marketing to business contacts | Business contact details | Legitimate interests, with an opt-out in every message; consent where required |
When a retail or manufacturer partner submits their end customers' details to us so that we can arrange an installation, the partner is the data controller and we process that data as their processor. In that role we: process the data only to deliver the installation service and follow the partner's lawful instructions; apply the security measures described in section 8; engage sub-processors under written terms (section 5); assist the partner with data subject requests relating to their data; and notify the partner without undue delay if we become aware of a personal data breach affecting their data. If you are an end customer with a question about how your data was collected, your first point of contact is normally the retailer you purchased from, though you are welcome to contact us and we will help route your request.
We share personal data only where necessary:
We do not sell personal data, and we do not share it with third parties for their own marketing.
We store personal data in the UK or the European Economic Area wherever possible. Where a service provider processes data outside the UK/EEA, we ensure an adequate level of protection through UK adequacy regulations, the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism.
| Data | Retention period |
|---|---|
| Website enquiries | 24 months from last contact, then deleted unless a business relationship has begun |
| Platform account data | Duration of the subscription plus 12 months, then deleted or anonymised |
| Job records (including completion and ratings) | 6 years from job completion, reflecting limitation periods for contractual claims |
| Engineer engagement and payment records | 6 years after the engagement ends, for tax and legal purposes |
| Invoicing and accounting records | 6 years, as required by law |
| Server and security logs | Up to 12 months |
Where data is needed beyond these periods for a live dispute or legal claim, we keep it until the matter concludes.
We apply technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS/TLS) across our sites and platform, role-based access controls so users see only their own organisation's data, hashed credentials, spam and abuse controls on public forms, restricted access to lead and job records, and regular review of access rights. No system is completely secure; if we become aware of a breach affecting your personal data that is likely to result in a high risk to you, we will inform you and the ICO as required by law.
Under the UK GDPR you have the right to: access the personal data we hold about you; have inaccurate data rectified; have data erased in certain circumstances; restrict processing in certain circumstances; object to processing based on legitimate interests, and to direct marketing at any time; and receive data you provided to us in a portable format (data portability) where processing is based on contract or consent and carried out by automated means.
To exercise any right, contact info@work-tech.co.uk. We will respond within one month. We may need to verify your identity before acting on a request. Where we act as a processor for a partner's data, we will pass your request to the relevant partner and assist them in responding.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, although we would welcome the chance to resolve any concern directly first.
Our sites use strictly necessary cookies for core functionality (such as session management on the platform and rate-limiting on the contact form). Where we use analytics or other non-essential cookies, we will request your consent through a cookie notice and you can withdraw consent at any time through your browser settings or the notice itself. Most browsers allow you to block or delete cookies; blocking strictly necessary cookies may affect how the platform functions.
We may send relevant service updates and marketing to business contacts under the UK's business-to-business marketing rules, and every message will contain a working unsubscribe option. We do not send marketing to end customers whose data we process on behalf of partners.
Our services are directed at businesses. We do not knowingly collect personal data from anyone under 18, except where an end customer's household details are incidentally included in job information supplied by a partner.
Job dispatch uses automated matching based on engineer skills, certification, and location. This is operational allocation and does not produce legal or similarly significant effects on individuals. We do not carry out automated decision-making of the kind restricted by Article 22 UK GDPR.
We may update this policy from time to time. The "last updated" date at the top shows the current version. For material changes we will provide notice on our sites or by email to account holders.
WorkTech Global Limited (Company No. 15151466) · Part of the IWG Group of Companies
Email: info@work-tech.co.uk · Phone: 07957 014082 · Monday–Sunday, 6am–10pm