Privacy Policy

The Konesco Certificate Tracker (“the App”) is operated by Konesco Ltd (“Konesco”, “we”, “us”) for use by its employees and staff. This policy explains what information the App collects, why, and how it is protected, whether you use it on the web or through the Android app.

Because the App manages mandatory training and right-to-work compliance for staff, it collects:

• Account details: full name, email address, and phone number.
• Employment details: job position, National Insurance number, and nationality, where required to verify right-to-work status.
• Certificates and documents: the training certificates, identification, and right-to-work documents you upload, along with their issue and expiry dates.
• Profile photo: if you choose to add one.
• Event participation: which staffing events you've confirmed availability for or been selected for.
• Account activity: approvals, renewal decisions, and notifications related to your account, used to keep your records and alerts up to date.

We do not collect location data, contacts, or device data beyond what's needed to run the App, and we do not use advertising or analytics tracking.

• To verify and track mandatory training and right-to-work compliance.
• To remind you and Konesco's admins before a certificate expires.
• To coordinate staffing for events — notifying you of new events and recording your confirmations.
• To administer your account, including registration approval and password resets.

We process this information because it is necessary for your employment relationship with Konesco and to meet our legal obligations around right-to-work checks and mandatory training records.

We don't sell your information or use it for advertising. It's shared only with the service providers that host and run the App on our behalf — currently Supabase (database, authentication, and file storage) and our email delivery provider (for certificate expiry reminders and event notifications) — strictly to provide the App's functionality, and with Konesco's HR administrators who are responsible for compliance records.

• All data is transmitted over encrypted (HTTPS) connections.
• Access to your records is restricted by role: only you and authorised admins can see your personal details and documents, enforced at the database level, not just in the app's screens.
• Employees confirming availability for an event never see other employees' names or personal details — only an organiser does.

We retain your information for as long as your account is active, and afterwards for as long as required to meet our legal obligations around employment and compliance records. You can ask us to delete your account and associated data at any time, subject to those legal retention requirements.

Under UK data protection law, you have the right to:

• Access the personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete your information, subject to our legal retention obligations.
• Object to or restrict certain processing.

To exercise any of these rights, contact us using the details below.

The App is intended for use by Konesco employees and is not directed at or intended for children.

We may update this policy from time to time. If we make material changes, we'll update the “Last updated” date above and, where appropriate, notify you in the App.

If you have any questions about this policy or how your information is handled, contact Konesco Ltd at admin@konescoltd.com.