Last updated: 17 June 2026
1. Introduction
Up Another Level Limited (“we”, “us”, “our”) operates the Up Another Level employee mobile app for construction workers and site staff. This policy explains how we handle personal data collected through the app. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data We Collect
When you use the Up Another Level employee app, we collect and process the following personal data:
- Names, email addresses and phone numbers — to identify you and communicate with you.
- Employment and trade information — your role, trade, qualifications and certifications.
- GPS location data — including background location used for site attendance. This covers QR check-in and check-out, GPS verification of your presence on site, and geofence-based automatic sign-out when you leave a site.
- Site attendance and timesheet records — when you clock in and out, breaks, and hours worked.
- Digital signatures and signed documents — signatures you provide on health & safety documents, and the signed documents themselves.
- Certifications and compliance records — expiry dates, training records and compliance status.
3. Why We Collect This Data
We process your personal data for the following purposes:
- Attendance and timesheets — to record your working hours accurately for payroll and project management.
- Site safety and security — to verify who is on site in real time, manage evacuations and ensure only authorised personnel are present.
- Geofence auto sign-out — to automatically log you out when you leave a site, keeping attendance records accurate.
- Health & safety compliance — to manage document sign-offs, track certification expiry and meet legal obligations.
- Communication — to send you shift updates, site alerts and app notifications.
- Payroll and reporting — to provide accurate hours data to payroll and management.
4. Location Data — Including Background Location
The app collects your GPS location in the foreground (while you are actively using the app) and in the background (even when the app is not open). Background location is used solely for:
- Verifying your presence on a worksite when you check in.
- Triggering automatic sign-out when your device leaves the geofenced site boundary.
- Supporting safety features such as headcount during site evacuations.
We do not track your location outside work hours or for purposes unrelated to attendance and site safety. You can disable background location in your device settings, but this may prevent automatic check-out and require you to manually clock out.
5. Lawful Basis for Processing
We process employee data under the following lawful bases:
- Contract — processing necessary to fulfil your employment agreement (payroll, attendance, timesheets).
- Legal obligation — health & safety compliance, right-to-work checks, tax and employment law.
- Legitimate interests — site safety, security, project management and fraud prevention.
- Consent — where required, for optional features or marketing communications (you can withdraw this at any time).
6. Data Storage & Security
Personal data is stored on secure servers within the UK or European Economic Area. We apply appropriate technical and organisational safeguards including encryption in transit, access controls, audit logging and regular backups. We retain employee records for the duration of your employment plus up to 7 years after termination to meet legal, tax and employment obligations.
7. Who Can Access Your Data
Your personal data is accessible to you and to authorised Up Another Level staff (HR, payroll, site managers and admin users) with a legitimate business need. Location and attendance data is shared with site supervisors for safety and project management. We do not sell or share your data with third parties for marketing purposes.
8. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data where applicable.
- Object to or restrict certain processing (e.g. location tracking where not legally required).
- Data portability where applicable.
- Withdraw consent at any time.
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
9. Data Retention
We keep your personal data for as long as necessary for the purposes described above. Attendance and timesheet records are retained for 7 years after the end of the tax year to which they relate. Location data is typically retained for 12 months, after which it is aggregated or deleted. Signed health & safety documents are retained for the life of the project plus the statutory limitation period.
10. Changes To This Policy
We may update this policy from time to time. Material changes will be posted on this page with a revised date.
11. Contact Us
For any privacy-related questions, to exercise your rights, or to request a copy of your data, please contact us via our contact page. We aim to respond within 30 days.