What data we collect, what we use it for, and what your rights are. This policy applies to workflowfix.com and every workspace subdomain hosted on it.
We abide by the following GDPR principles to protect your privacy:
We process personal data both as Processor and as Controller as defined by the GDPR. For some activities we may rely on external processors (as described under "Information security"). If you'd like to exercise any of your rights under GDPR, contact us at support@umbrelladev.com.
You can contact us at any time to request:
You can visit our website without telling us who you are or revealing any personal information about yourself. The only information we gather during general browsing — aside from the IP address — is mostly anonymous traffic data including browser information, device information, and language.
When you create a WorkflowFix workspace, or request access to an existing one, we ask for your name, email address, and a password. If you're creating a workspace we also ask for your organisation name and a chosen workspace slug. Inside the platform, you'll enter operational data — projects, people, subcontractors, plant, daily site diary entries and so on — that we store to provide the service.
If you contact us for support, feedback, or with a question, we'll keep a record of the correspondence to help resolve your query and improve the service.
We might receive information about you from other sources — for example a face-to-face meeting, an introduction from a third party, or an event you attended. You may also provide us with your personal data by corresponding with us by mail, phone, video conference, or otherwise. Before any information is added to our databases or mailing lists, you will be asked for your explicit consent.
Where an application is made by an individual for employment with us, the data will be stored in an electronic database and retained according to our data retention policy.
We may use browser cookies and privacy-respecting analytics to improve our service, your experience, and to understand how the platform is used. Anonymous usage data is used to provide an overview of how people access and use WorkflowFix — we do not use it for profiling or advertising.
We use your personal data to contact you:
We take reasonable care to ensure the security of your personal data. We do not sell your data. Personal data is not used in ways other than as set forth in this policy or in ways to which you have explicitly consented.
Our staff, and anyone with access to systems processing personal data, are obliged to respect the confidentiality of business matters, including personal data.
Data is transmitted over encrypted connections (HTTPS/TLS) and stored on servers physically located within the United Kingdom. Passwords are stored as one-way hashes and are never visible to us.
The website may provide links to third-party services (e.g. weather data, payment providers, analytics). Once you follow such a link you will be on a different service with its own privacy policy that you should consult separately.
We do not disclose your personal data except in the limited circumstances described below:
WorkflowFix is multi-tenant: each workspace's operational data (projects, people, diary entries, and so on) is only accessible to members of that workspace whose access has been approved by the workspace's designated Lead. Platform administrators may access workspace data only where necessary to provide support you have requested, or to investigate a genuine security or integrity concern.
Providing personal data on our website is optional. You can choose not to provide personal data; you may still browse the site, but you will not be able to create or use a workspace.
If you have a WorkflowFix account, you can update most of your personal data yourself via your account settings. If you'd like a full electronic copy of the personal data we hold about you, contact us at support@umbrelladev.com.
If you no longer want to use WorkflowFix and wish us to delete your data, contact us at the address above. Where a commercial relationship has taken place, or where information has been supplied that we're legally required to keep (e.g. for accounting or safeguarding), we reserve the right to retain that information for the period required by law.
All service emails contain sender information making it clear who to contact for opt-out. Marketing emails, where applicable, include an unsubscribe link.
We retain personal data for as long as your account is active, or otherwise for a limited period, only as long as we need it to fulfil the purpose for which we collected it or where there is legitimate interest or a legal obligation to keep it.
We reserve the right to change this Privacy Policy. Substantial changes will be notified to workspace admins by email; the current version will always be available at this URL.