Data rights & processing

This page summarises how personal data is handled across ScaffOps™ and Scaffolder Near Me, your rights under UK data protection law, and how to make requests. Full detail is in our privacy policy.

1. Roles: controller and processor

• We act as controller for account, billing, marketplace, directory, support, and platform operation data — including customer job posts and business account administration.
• We act as processor when a subscribing scaffolding business uses ScaffOps to store site, quote, compliance, workforce, and client data about their customers and staff. In those cases the business is usually the controller and must provide its own privacy information to data subjects.
• Businesses act as controllers for quotes, projects, and site records they create. They choose what to collect and share via the Platform.

2. Your rights (UK GDPR)

Subject to exceptions in law, you may have the right to:

• Access — receive a copy of personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — ask us to delete data in certain circumstances (“right to be forgotten”)
• Restriction — limit how we use your data in certain cases
• Object — object to processing based on legitimate interests or for direct marketing
• Portability — receive data you provided in a structured, machine-readable format where processing is automated and based on consent or contract
• Withdraw consent — where processing relies on consent, without affecting prior lawful processing
• Automated decisions — not be subject solely to automated decisions with legal or similarly significant effects, except where permitted by law

3. How to make a request

1. Use in-app settings or support where available (fastest for account holders).
2. Email or write to us using the contact details on scaffoldernearme.co.uk or scaffer.co.uk, stating which right you are exercising and enough detail to identify you.
3. For data held by a scaffolding business in their ScaffOps workspace, contact that business first — we may redirect you or assist them as processor.

We may ask for identity verification. We respond within one month in most cases, extendable where law allows for complex requests.

4. Directory and public information

To remove or correct a public directory listing, see our directory policy. Erasure of personal data may not remove all historical backups, logs, or third-party caches immediately.

5. Marketing and communications

You can opt out of marketing emails using unsubscribe links. Service messages (security alerts, quote delivery, job notifications) may still be sent where necessary for the service.

6. International transfers

Some subprocessors process data outside the UK. We use appropriate safeguards as described in our privacy policy.

7. Complaints

Contact us first so we can try to resolve your concern. You may also complain to the UK Information Commissioner's Office (ico.org.uk).

8. Children

The Platform is not intended for under-18s. We delete data about children if we become aware of it.