GDPR Compliance

Your Rights Under UK GDPR

You have the right to:

• Access your personal data.
• Correct inaccurate information.
• Request deletion of your data where applicable.
• Restrict certain types of processing.
• Object to specific processing activities.
• Request a copy of your personal data in a portable format.
• Withdraw consent where consent is the legal basis for processing.

If you wish to exercise any of these rights, please contact us using the details below.

GPS Location Data

SubbyLive only records GPS location when required to support attendance and workforce management features enabled by your organisation.

Location information is only accessible to authorised managers within your organisation and is processed solely for legitimate business purposes.

Data Security

We use appropriate technical and organisational measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS).
• Secure cloud infrastructure.
• Access controls and authentication.
• Role-based permissions.
• Regular software updates and security monitoring.

Although we take every reasonable precaution, no online service can guarantee absolute security.

Data Retention

We retain personal information only for as long as necessary to:

• Provide our services.
• Meet legal and regulatory requirements.
• Resolve disputes.
• Enforce our agreements.

When data is no longer required, it is securely deleted or anonymised where appropriate.

Sharing Your Information

We never sell your personal information.

We may share data only:

• With your employer or authorised company administrators.
• With trusted service providers who help us operate SubbyLive.
• Where required by law.
• To protect our legal rights or investigate suspected fraud.

All third-party providers are expected to protect personal data in accordance with applicable data protection laws.

International Data Transfers

Where personal data is transferred outside the United Kingdom, we take appropriate safeguards to ensure that your information remains protected in accordance with UK GDPR requirements.

Privacy by Design

Privacy and security are considered throughout the design and development of SubbyLive.

We continually review our systems and processes to help ensure that personal data is collected responsibly, stored securely and accessed only by authorised users.

Reporting a Data Protection Concern

If you have concerns about how we handle your personal data, we encourage you to contact us first so we can investigate and resolve the issue promptly.

If you remain dissatisfied, you may have the right to raise your concern with the UK's data protection regulator.