Privacy Policy

1. Who we are

PinnCert provides GPS-verified time tracking for companies with workers in the field. For the data described here, PinnCert acts as the data controller for this website and as a data processor for the check-in data our customers collect through the product.

Contact: [email protected]. Please write to us to update the registered company name, address and registration number shown here — we have deliberately left them out rather than invent them.

2. What we collect on this website

Contact form: your name, company, business domain, email address and the message you write. The form only delivers that information to us by email — this website runs no database, so nothing you submit is collected, stored or profiled on our side.

Technical data: standard server logs such as IP address, browser type and pages visited, used to keep the site secure and working.

We do not run advertising trackers on this site and we do not sell personal data to anyone.

3. Location data in the product

In the PinnCert app, a location reading is taken at the moment a worker taps check-in or check-out, to confirm they are inside the worksite radius set by their employer.

PinnCert does not track workers continuously and does not follow their location between check-ins or outside working hours.

Each check-in event stores the timestamp, the site it was matched to, and whether it fell inside or outside the radius.

4. Legal basis

For website enquiries, we rely on your consent and on our legitimate interest in responding to business contacts.

For check-in data, our customers (the employers) determine the legal basis — typically performance of an employment contract and their legal obligation to record working time. Employers are responsible for informing their workers.

5. How long we keep data

Enquiries sent through the contact form arrive in our mailbox and are kept there only as long as needed to answer you and to follow up on the enquiry.

Check-in records are kept for as long as the customer's contract requires, plus any statutory retention period for payroll records, after which they are deleted or anonymised.

6. Who we share data with

Service providers who host our infrastructure, send our email and support our helpdesk, all bound by data processing agreements.

Public authorities, only where we are legally required to do so.

7. Your rights

You can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it at any time.

Write to [email protected] and we will respond within 30 days. You also have the right to complain to your national data protection authority.

If you are a worker whose employer uses PinnCert, please contact your employer first — they control that data.

8. Security

Data is transmitted over encrypted connections and stored on access-controlled infrastructure. Check-in events are written server-side and cannot be edited retroactively.

9. Cookies

This website uses only the cookies strictly necessary for it to function. No advertising or profiling cookies are set.

10. Changes to this policy

If we change this policy we will update the date below and, where the change is significant, notify our customers directly.