Privacy Policy

Railston & Company Ltd ("we", "us", "our") operates the Collabaro platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

1. Information We Collect

Information you provide

We collect information you provide directly, including:

• Name, email address, phone number, and company details when you register or contact us
• Timesheet data, GPS coordinates, photographs, and checklist responses submitted through Collabaro Field
• Project and financial data entered into Collabaro Desk
• Communication records when you contact our support team

Information collected automatically

When you use our platform, we may automatically collect:

• Device information (type, operating system, browser)
• IP address and approximate location
• Usage data including pages visited and features used
• Cookies and similar tracking technologies (see our Cookie Policy)

2. How We Use Information

We use your information to:

• Provide, maintain, and improve the Collabaro platform
• Process timesheets, generate reports, and manage project workflows
• Communicate with you about your account, updates, and support requests
• Ensure the security and integrity of our services
• Comply with legal obligations and enforce our terms
• Analyse usage patterns to improve user experience

We process your personal data on the following lawful bases: performance of a contract (to deliver the services you have subscribed to), compliance with legal obligations, and our legitimate interests in operating and improving a secure and effective platform. Where we rely on consent, you may withdraw it at any time.

3. Data Storage & Security

All data is stored on secure servers within the European Union. We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls and multi-factor authentication
• Regular security audits and penetration testing
• Automated daily backups with geo-redundant storage
• Incident response procedures and breach notification protocols

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Following termination of a subscription, customer data is retained for up to 30 days before being securely deleted, in accordance with our Terms and Conditions.

4. Third-Party Services

We may share your data with trusted third-party service providers who assist us in operating the platform, including:

• Cloud hosting providers (EU-based infrastructure)
• Analytics services to understand platform usage
• Email service providers for transactional communications

We do not sell your personal data to third parties. All third-party providers are bound by data processing agreements that meet GDPR requirements.

5. Your Rights

Under the UK GDPR and Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict the processing of your data
• Request data portability in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

Railston & Company Ltd is registered with the ICO as a data controller under reference ZA542990.

6. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Railston & Company Ltd
Sadler Bridge Studios
Bold Lane
Derby, DE1 3NT
United Kingdom

Email: info@collabaro.com
Phone: +44 (0) 115 678 6189