Data Protection

Parko is operated for Parko Cleaning Services in the United Kingdom (including Northern Ireland). We handle every piece of staff data in line with the UK GDPR, the Data Protection Act 2018 and HMRC record-keeping rules.

The data controller is the business owner / Manager (Simon). Day-to-day data decisions (who is added, who can access timesheets, when records are deleted) are made by the Manager. You can raise any data question through in-app Messages.

• We only collect what we actually need to run shifts, payroll and holidays.
• We never sell your data or share it with advertisers.
• We store data on encrypted servers based in the UK / EU.
• PINs are stored only as a one-way encrypted hash — nobody, not even the Manager, can read your PIN.
• All traffic between your phone and the app is encrypted (HTTPS / TLS).
• Role-based access means employees only see their own data. Only the Manager and admin can see company-wide reports.

To run the app we rely on these trusted providers:

• Lovable Cloud — hosting and managed database (UK / EU regions).
• Email provider — to send payroll PDFs to the company accountant and password-reset notifications.

Each provider is bound by a data processing agreement that meets UK GDPR Article 28 requirements.

• Timesheets & payroll: at least 6 years (HMRC requirement).
• Holiday & absence records: duration of employment + 6 years.
• Messages & consumables requests: while you are working with the company, then deleted on a reasonable schedule.
• Account & PIN hash: deleted when you leave the company (the Manager removes you from the Team screen).

If we ever discover a personal data breach that is likely to affect you, we will notify you and, where required, the Information Commissioner’s Office within 72 hours.

You can request access, correction or deletion of your data at any time. See the Privacy Policy for the full list of rights and how to use them.

If you believe your data has been mishandled, please raise it with the Manager first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113.