Privacy policy

Last updated: [date]

Gapless is run by [Your full name], trading as Gapless. We are the controller of your personal data, which means we decide how it is used. Contact us at hello@gaplessapp.co.uk. We are registered with the Information Commissioner's Office (ICO), number [ZA000000].

What we collect

• Everyone: your email address, name, whether you are a business or a worker, and log-in records (when you logged in, your IP address and browser), which keep accounts secure.
• Workers: your profile (roles, towns, certificates, weekly hour limit), the shifts you apply for and work, clock-in and clock-out times, ratings and no-shows.
• Venues: your venue's name, type and address, the shifts you post, and ratings.
• Notifications: if you turn them on, an address your browser gives us for sending them to your device.
• Payments: Stripe handles venue payments. We never see card details.

We never collect passports or other ID documents. Venues check workers' right to work themselves.

Why we use it

• To run Gapless for you: introductions, bookings, emails and notifications. The legal basis is our contract with you.
• To keep Gapless safe: stopping bots, preventing misuse and suspending accounts that break our terms. The legal basis is our legitimate interest in a safe, reliable service.
• To meet the law: employment agencies must keep records of introductions, and we must keep tax records.

Who can see it

• When you apply for a shift, the venue sees your name, profile, completed shifts, ratings and no-shows. Once you are booked, the venue sees your email address and you see the venue's address.
• Companies that run parts of Gapless for us, only to provide their service: Cloudflare (hosting, database, bot checks and visitor statistics), Resend (emails), Stripe (venue payments), and the push services of Google, Apple, Mozilla or Microsoft (notifications). Some are in the USA, where your data is protected by the UK–US data bridge or the safeguards in their contracts.
• We never sell your data or use it for advertising.

How long we keep it

We keep your account while it is open. If you ask us to close it, we delete your data within 30 days, except records of introductions and bookings, which the law requires us to keep for at least a year after we last worked with you. We keep those for [2 years], then delete them.

Cookies and statistics

Gapless uses one cookie, which keeps you logged in. It is essential, so we don't ask before setting it. We count visits with Cloudflare Web Analytics, which uses no cookies and doesn't follow you around other websites.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email hello@gaplessapp.co.uk and we will reply within a month. If you are unhappy with our answer, you can complain to the ICO at ico.org.uk/make-a-complaint.

Changes

If we change this policy in a way that matters to you, we will email you before the change takes effect.