Privacy Policy

Parko (“we”, “us”, “our”) is a workforce app used by Parko Cleaning Services to record timesheets, holidays, absence, consumables requests and internal messages. The data controller is the business owner, Simon (the “Manager”). You can contact us through the in-app Messages screen or ask the Manager directly.

This policy is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). It applies to employees and contractors in the United Kingdom, including Northern Ireland.

• Your name, User ID, email and weekly contracted hours.
• An encrypted (hashed) version of your 4-digit PIN — never the PIN itself.
• Timesheet entries you submit: date, hours, job area, notes and photos you attach.
• Holiday and absence requests, plus approval decisions.
• Messages and consumables requests you send through the app.
• Basic technical data (sign-in times, device type) needed to keep the account secure.

• Contract: to pay you, schedule your shifts and manage your holidays.
• Legal obligation: to keep working-time and payroll records HMRC requires.
• Legitimate interest: to run the business, prevent fraud and keep the app secure.

• Only the Manager (Simon) and the admin can see everyone’s timesheets, payroll figures, holiday history and messages. This is how the business has always worked and is necessary to run payroll.
• You can always see your own data.
• Approved timesheets are sent to the company accountant for payroll, and may be shared with HMRC if legally required.
• We do not sell your data, share it with advertisers, or use it for profiling outside of payroll and scheduling.

Every employee gets their own login. The first time you sign in, the Manager will give you a starter PIN. The app will then ask you to set a new 4-digit PIN that only you know. If you forget it, the Manager can reset it — when you sign in with the reset PIN the app will again ask you to create a fresh personal PIN, so the Manager never knows your day-to-day PIN.

Timesheet and payroll records are kept for at least 6 years to meet HMRC rules. Messages and consumables requests are kept while you work with the company and for a reasonable period afterwards. When data is no longer needed it is deleted or anonymised.

Under UK GDPR you have the right to:

• Access a copy of the personal data we hold about you.
• Have inaccurate data corrected.
• Ask for data to be deleted where we are not legally required to keep it.
• Restrict or object to certain processing.
• Request a portable copy of data you provided.
• Withdraw any consent you previously gave.

To use any of these rights, message the Manager in-app. We will respond within 30 days. If you are not happy with our response you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Data is stored on encrypted servers in the UK / EU. PINs are stored only as a one-way hash. Connections to the app use HTTPS. Access is restricted by role so employees can only see their own data, and only the Manager / admin can see company-wide data.

If we make significant changes we will let you know in-app. The latest version will always be available here.