COLLA

1. Data Controller

COLLA is operated by DGContracts, registered in England and Wales. We are the data controller responsible for your personal data. If you have any questions about this Privacy Policy, please contact us at customercare@colla.uk.

2. What Data We Collect

We collect and process the following personal data when you use the COLLA app:

• Full name and email address
• Location (city, county, or postcode area)
• CSCS occupation details and card type
• Profile photos
• Job preferences (job type, availability, experience level)
• Swipe and match history
• Chat messages exchanged with matches
• Payment information processed via Stripe

3. Legal Basis for Processing

We process your personal data under the following legal bases as permitted by UK GDPR:

• Consent: You provide consent during sign-up by agreeing to this Privacy Policy and our Terms of Service.
• Legitimate Interest: We process data for job matching purposes to connect job seekers with employers in the construction and trades sectors.
• Contract: Processing is necessary to provide subscription services and fulfil our contractual obligations to you.

4. How We Use Your Data

Your personal data is used for the following purposes:

• Matching job seekers with relevant employers and job postings based on CSCS occupations, skills, location, and preferences
• Displaying your profile to potential employers or job seekers within the app
• Facilitating real-time chat between matched users
• Processing subscription payments through Stripe
• Improving the app experience and service quality

5. Data Sharing

We share your payment information with Stripe, our payment processor, solely for the purpose of processing subscription payments. Stripe operates as an independent data controller for payment data. For more information, please refer to Stripe's Privacy Policy.

We do not sell, rent, or trade your personal data to any third parties. We may disclose your data if required by law or to protect our legal rights.

6. Data Retention

We retain your personal data for as long as your account remains active. If you request account deletion, we will permanently erase all your personal data, including your profile, messages, match history, and any associated records. Certain data may be retained for a limited period where required by law (e.g., financial transaction records).

7. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your personal data.
• Right to Restriction: You may request that we limit processing of your data in certain circumstances.
• Right to Data Portability: You may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest.

8. How to Exercise Your Rights

You can exercise your data rights directly within the app via the Data & Privacy section on your Profile page. From there you can download a copy of your data or delete your account entirely. You may also contact us at customercare@colla.uk to submit a data request.

9. Cookies and Local Storage

COLLA is a mobile application and does not use browser cookies. We use AsyncStorage (a local on-device storage mechanism) to store your preferences, authentication state, and app settings for functionality purposes. This data remains on your device and is not transmitted to third parties.

10. Security Measures

We take appropriate technical and organisational measures to protect your personal data, including:

• Encrypted connections (HTTPS/TLS) for all data transmission
• Secure payment processing via Stripe (PCI DSS compliant)
• Secure authentication and session management
• Regular security reviews and updates

11. Children

COLLA is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes through the app or by email. Your continued use of COLLA after such changes constitutes your acceptance of the updated policy.