Up Another Level: Building Exceptional Spaces
Legal

Employee App Privacy.

How we collect, use and protect your data in the Up Another Level employee app.

Last updated: 17 June 2026

1. Introduction

Up Another Level Limited (“we”, “us”, “our”) operates the Up Another Level employee mobile app for construction workers and site staff. This policy explains how we handle personal data collected through the app. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

When you use the Up Another Level employee app, we collect and process the following personal data:

  • Names, email addresses and phone numbers — to identify you and communicate with you.
  • Employment and trade information — your role, trade, qualifications and certifications.
  • GPS location data — including background location used for site attendance. This covers QR check-in and check-out, GPS verification of your presence on site, and geofence-based automatic sign-out when you leave a site.
  • Site attendance and timesheet records — when you clock in and out, breaks, and hours worked.
  • Digital signatures and signed documents — signatures you provide on health & safety documents, and the signed documents themselves.
  • Certifications and compliance records — expiry dates, training records and compliance status.

3. Why We Collect This Data

We process your personal data for the following purposes:

  • Attendance and timesheets — to record your working hours accurately for payroll and project management.
  • Site safety and security — to verify who is on site in real time, manage evacuations and ensure only authorised personnel are present.
  • Geofence auto sign-out — to automatically log you out when you leave a site, keeping attendance records accurate.
  • Health & safety compliance — to manage document sign-offs, track certification expiry and meet legal obligations.
  • Communication — to send you shift updates, site alerts and app notifications.
  • Payroll and reporting — to provide accurate hours data to payroll and management.

4. Location Data and Geofencing

The Up Another Level app uses background location (not only when the app is open). This section explains exactly why, what we do with it, and what we deliberately do not do, so you can make an informed choice before granting permission.

4.1 Why we use background location

  • QR check-in: workers scan a site-specific QR code at the entrance of a construction site to check in. At the moment of the scan we read your GPS coordinates to confirm you are physically at the site the QR code belongs to.
  • Geofence monitoring while on site: once you are checked in, the app monitors the site’s geofence (a virtual boundary around the site, typically a 50 metre radius set by the site administrator).
  • Automatic sign-out on geofence exit: if you physically leave the geofence, the app automatically signs you out of the site, even when the app is in the background or closed.
  • UK construction health and safety compliance: these features support our obligations under the Construction (Design and Management) Regulations 2015 (CDM 2015), including fire roll call, emergency evacuation, daily site headcount and lone worker monitoring.

4.2 What we do NOT do

  • We do not track or log your continuous location.
  • We do not transmit GPS coordinates to a server during normal use.
  • We do not store a history of your location.
  • Location data is evaluated locally on your device only, for the sole purpose of detecting when you cross the geofence boundary.
  • The only location-related data stored on our servers is: the GPS coordinates captured at check-in(to confirm proximity to the QR code at scan time) and at check-out (to confirm the exit was geofence-triggered). There is no continuous tracking and no location history.

4.3 Your consent and control

  • You must explicitly agree to location-sharing for geofencing as part of the site check-in declaration. This is one of six mandatory acknowledgements you confirm before scanning a QR code at any site.
  • You can revoke location permission at any time via your device Settings.
  • If location permission is revoked or denied, automatic geofence sign-out will not work and you will need to sign out manually. The rest of the app (digital ID, documents, requests and so on) will continue to work normally.

4.4 Retention of location data

Check-in and check-out coordinates are retained for 7 years for health and safety audit purposes (aligned with our wider attendance and timesheet retention period under UK tax and employment law), after which they are deleted.

4.5 Your rights over location data

You can request access to, or deletion of, your location data at any time by emailing Info@upanotherlevel.co.uk. Your full UK GDPR rights apply, including access, rectification, erasure, restriction and portability (see Section 8).

5. Lawful Basis for Processing

We process employee data under the following lawful bases:

  • Contract — processing necessary to fulfil your employment agreement (payroll, attendance, timesheets).
  • Legal obligation — health & safety compliance, right-to-work checks, tax and employment law.
  • Legitimate interests — site safety, security, project management and fraud prevention.
  • Consent — where required, for optional features or marketing communications (you can withdraw this at any time).

6. Data Storage & Security

Personal data is stored on secure servers within the UK or European Economic Area. We apply appropriate technical and organisational safeguards including encryption in transit, access controls, audit logging and regular backups. We retain employee records for the duration of your employment plus up to 7 years after termination to meet legal, tax and employment obligations.

7. Who Can Access Your Data

Your personal data is accessible to you and to authorised Up Another Level staff (HR, payroll, site managers and admin users) with a legitimate business need. Location and attendance data is shared with site supervisors for safety and project management. We do not sell or share your data with third parties for marketing purposes.

8. Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request erasure of your data where applicable.
  • Object to or restrict certain processing (e.g. location tracking where not legally required).
  • Data portability where applicable.
  • Withdraw consent at any time.
  • Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Data Retention

We keep your personal data for as long as necessary for the purposes described above. Attendance and timesheet records are retained for 7 years after the end of the tax year to which they relate. Location data is typically retained for 12 months, after which it is aggregated or deleted. Signed health & safety documents are retained for the life of the project plus the statutory limitation period.

10. Changes To This Policy

We may update this policy from time to time. Material changes will be posted on this page with a revised date.

11. Contact Us

For any privacy-related questions, to exercise your UK GDPR rights, or to request access to or deletion of your data (including location data), please email our data protection contact at Info@upanotherlevel.co.uk or use our contact page. We aim to respond within 30 days.