Privacy notice

Brigadeur provides rota, training and time-tracking software to organisations that employ shift-based staff. This notice explains what personal data we handle, why, and what rights you have over it.

Who is responsible for your data

If you are a member of staff at an organisation that uses Brigadeur, your employer is the data controller and Brigadeur is a data processor acting on their instructions. Requests to see, correct or delete your data should go to your employer first. We act as controller only for our own account holders and website visitors.

What we hold

• Identity and contact — name, work email, the sites and departments you belong to, and your role.
• Working time — shifts assigned, clock-in and clock-out times, timesheets, and leave requests and balances.
• Location — where clock-in is done from a phone, the coordinates at the moment of clock-in and clock-out. We do not track location at any other time.
• Photographs — where your employer uses the shared tablet kiosk, a photograph is captured at clock-in to confirm identity.
• Training records — modules completed, quiz attempts, sign-offs for roles and stations, certificates uploaded, and their expiry dates.
• Pay — contracted hours and hourly rate, held separately and visible only to managers.

Why we hold it

To operate the service your employer has asked us to provide: building rotas, recording hours worked, calculating holiday entitlement, and evidencing that staff are trained for the work they are assigned. Location and photographs at clock-in exist to confirm that the person clocking in is who they say they are and is where they are meant to be.

Who can see it

Every organisation's data is isolated at the database level. Staff see their own records; managers see their organisation's. Nobody sees another organisation's data. Pay information is restricted to managers within your own organisation.

Where it is stored

Data is stored in the United Kingdom. Our database is hosted by Supabase and the application by Vercel, both operating in a London region.

How long we keep it

For as long as your employer's account is active, and afterwards only as long as employment-record law requires. Your employer sets their own retention period and can delete records at any time.

Your rights

Under UK GDPR you can ask for a copy of your data, ask for it to be corrected, object to how it is used, or ask for it to be erased. Contact your employer, or us at our contact page if they cannot help. You can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We use a session cookie to keep you signed in. We do not use advertising or third-party tracking cookies.