1. Who We Are
E&E Work Ltd ("we", "us", "our") is the data controller responsible for your personal data collected through the E&E Work platform. We are committed to protecting and respecting your privacy in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Data We Collect
We collect and process the following categories of personal data:
- Identity Data — full name, date of birth, National Insurance number
- Contact Data — email address, phone number, postal address
- Employment Data — driving licence details, CPC status, tachograph card, work experience, vehicle types
- Document Data — scanned copies of licences, right-to-work documents, and other compliance documents
- Company Data — company name, registration number, VAT number, operator licence details
- Usage Data — login activity, messaging history, job application history, map status
- Location Data — approximate location derived from postcode (used for map visibility)
3. How We Use Your Data
We use your personal data to:
- Create and manage your account on the Platform
- Connect drivers with transport companies and jobs
- Verify compliance documents and qualifications
- Enable internal messaging between platform users
- Display workforce availability on the live map (with your consent)
- Send notifications relevant to jobs, applications, and compliance
- Improve platform performance and user experience
- Comply with legal obligations
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract — processing necessary to deliver the platform services you have registered for
- Consent — where you have given explicit consent, such as sharing documents with companies
- Legitimate Interests — to improve the Platform and protect platform security
- Legal Obligation — where we are required to process data to comply with applicable law
5. Data Sharing
We share your data only where necessary:
- With companies — only documents you explicitly choose to share
- Within your company — staff linked to your company can access permitted data
- Service providers — including Supabase (cloud infrastructure) and Netlify (hosting), under data processing agreements
- Legal authorities — where required by law or to protect rights and safety
We do not sell your personal data to third parties.
6. Data Retention
We retain your personal data for as long as your account is active and as required by law. When you delete your account, we will delete or anonymise your data within 30 days, except where we are required to retain it for legal compliance purposes.
7. Your Rights
Under UK GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — restrict processing of your data in certain circumstances
- Data Portability — receive your data in a portable format
- Object — object to processing based on legitimate interests
- Withdraw Consent — withdraw consent at any time where processing is consent-based
To exercise your rights, contact us at: privacy@eeworkapp.co.uk
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. This includes encrypted storage, row-level security on our database, and restricted access controls.
9. Complaints
If you have concerns about our data handling, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
10. Contact Us
For privacy enquiries, contact E&E Work Ltd at: privacy@eeworkapp.co.uk