Privacy Policy

1. Who we are

360Synk Ltd is a UK-based software company providing the business operating system for field-service companies — a connected system of tools to run the whole business when you have people in the field, proven first in electrical. This privacy policy explains how we collect, use, and protect your personal data.

Last updated: 20 August 2026
Version: 1.2

2. Data controller

360Synk Ltd is the data controller for personal data processed through the 360Synk Service (web and mobile apps). Your employer (the company that creates your login) is typically the controller of day-to-day workplace records they put into 360Synk; we process that data to provide the Service.

3. Data we collect

Information you provide

- Account details (name, email, phone) - Company information - Business data you enter (jobs, clients, sites, certificates, timesheets, documents, photos) - Communications with our support team

Automatically collected data

- Usage data (features used, app events) - Technical data (device type, OS, IP address, app version) - Crash diagnostics (to improve reliability) - Push notification tokens (to deliver job and safety alerts) - Cookies and similar technologies on the web (see Cookie Policy)

Location data (mobile app)

Where your company enables location sharing for field staff, the 360Synk mobile app may collect precise location from your device — including while the app is in the background — during an approved working / tracking window so authorised office users can see who is nearest a job and keep the day’s travel map accurate.

- Location is used only for workplace operations for your company account. We do not use it for advertising, and we do not sell location data.
- Sharing requires phone permission (and, where offered, in-app confirmation). You can turn location sharing off in the app Settings, change or revoke phone permissions, or log out — tracking then stops.
- While location sharing is on, the app may also use motion / activity sensors (for example to tell walking from driving) so the map stays accurate without draining the battery unnecessarily.
- Location points are stored with your company’s tenant data on our servers and are visible only to authorised users in that organisation (for example office staff using the dispatch map). They are not shown on the public App Store listing or to other companies.

4. How we use your data

We use your data to:
- Provide and improve the 360Synk platform
- Authenticate users and keep accounts secure
- Send service-related communications (including push notifications where enabled)
- Support workplace operations such as job planning and the office dispatch map when location sharing is enabled
- Comply with legal obligations
- Protect platform security and prevent fraud

We do not sell your personal data.

5. Legal basis (UK GDPR)

We process data based on:
- Contract performance (providing the Service to your company)
- Legitimate interests (security, product improvement, service reliability, and workplace operations your company configures)
- Consent (where required — including device permission for location / motion, and certain marketing)
- Legal obligations

6. Data sharing

We may share data with:
- Authorised users inside your company (for example office staff who can see the dispatch map)
- Infrastructure and service providers (e.g. Microsoft Azure hosting, email/push delivery)
- Professional advisors
- Law enforcement when legally required
- In the event of a business transfer

Sub-processors are bound by appropriate data-protection terms. We do not sell personal data to third parties.

7. International transfers

Where data is processed outside the UK/EEA, we use appropriate safeguards (such as standard contractual clauses).

8. Data storage and retention

Data is stored on Microsoft Azure infrastructure with encryption in transit and at rest. We retain data for as long as needed to provide the Service to your company, plus any legal retention periods applicable to contracting records. Location history for workplace tracking is retained with your company tenant data and removed or anonymised according to your company’s account settings and our retention practices when the account or user is closed.

9. Your rights

Under UK GDPR you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention)
- Object to certain processing
- Data portability
- Withdraw consent where processing is consent-based (including by turning off location sharing or revoking phone permissions)

Staff using the mobile app can request account deletion in Settings. Company administrators also manage user access for their organisation.

Contact privacy@360synk.com to exercise these rights.

10. Security

We implement appropriate technical and organisational measures to protect your data, including access controls, encryption, and monitoring.

11. Children

The Service is for business use and is not directed at children.

12. Changes

We may update this policy. Material changes will be notified via the Service or email where appropriate. The version and last-updated date appear at the top of this page.

13. Contact

Privacy enquiries: privacy@360synk.com