SubbiePackUK GDPR
Privacy
This marketing site has no accounts. If you use the app, the firm tools for export and delete live there.
What a firm account holds
Company name, work email, password (stored as a hash), and an httpOnly session cookie. Subcontractors: name, trade, phone, optional work email. Documents: the file you upload or they send, the original filename, and the expiry date you typed.
Reminders and an activity log sit on the same firm: who added a subbie, who uploaded a file, who exported a pack, which reminder was sent.
What we do not keep
National Insurance numbers, dates of birth, home addresses, or other personal data beyond name, trade, phone and work email. We do not run a public directory. One firm cannot see another firm’s subcontractors.
Who can see it
People signed in to that firm: the owner, and one extra office or site manager if the owner invited them. Upload links are single-use and only accept the file for that subbie and document type. Anonymous visitors cannot add or view contractors.
Export and delete
From the app: export your data as JSON/ZIP, or delete this firm and all files. Those controls are not on this website because this website has no accounts.
Billing
Payments, if you subscribe, go through Stripe. Until live billing is turned on, the app uses test keys. Stripe’s own privacy notice covers card data. We do not store card numbers on SubbiePack.
This website
The public pages explain the product. They do not collect a firm account. Hosting and logs are whatever the host keeps to serve the pages.