NuPoz Apps Privacy Policy
NuPoz Reports · NuPoz Notes · NuPoz Clock In · NuPoz Bookings
Effective 9 September 2026
This policy explains how NuPoz Group Ltd handles personal data in the NuPoz mobile applications listed above, which are distributed through Google Play and the Apple App Store.
These apps are business tools supplied to organisations. You will normally have been given your sign-in details by your employer or by whoever administers your organisation’s NuPoz account. That organisation decides what business data is held in the system; we handle it on their behalf.
1. Who we are
NuPoz Group Ltd is the data controller for these apps.
- Registered in England and Wales, company number 16404408
- 119–121 Buxton Road, Stockport, Cheshire, SK2 6LR, United Kingdom
- Contact: admin@nupoz.com
The service infrastructure behind these apps is operated for us by
GS Systems Limited (company number 3288521, of the same address), acting
on our instructions as our data processor. Some of our systems and email addresses still
use the gs-systems.co.uk domain during the transition to the NuPoz brand.
2. What we collect
Information you give us
- Sign-in details — the username and password issued to you for your organisation’s account.
- Business data you enter or view in the app — this varies by app, and is set out in the table below.
Information stored on your device
- A session token, held in the app’s private storage so you are not asked to sign in every time you open it. It is removed when you log out.
- App preferences, such as your light or dark theme choice.
What we do not do
- We do not use your data for advertising, and the apps carry no advertising.
- We do not sell your personal data, and we do not share it with data brokers.
- We do not build profiles about you for marketing purposes.
- We do not use customer contact details held in NuPoz Bookings for marketing, and we do not pass them to anyone outside the parties named in section 5.
3. Data by app
| App | What it handles |
|---|---|
| NuPoz Reports | Reads your organisation’s sales and performance figures and presents them as reports and charts. It does not create or alter records. |
| NuPoz Clock In | Records shift start and finish times against your staff record, and the site or workplace associated with the shift as configured by your organisation. It does not use your device’s GPS or location. The site is identified from your organisation’s own configuration, not from where you are. |
| NuPoz Notes | Stores notes and shift handover information you write, together with who wrote them and when. |
| NuPoz Bookings | Holds booking and appointment records for your organisation, including the name and contact details of the customer each booking is for. Those details are entered by your organisation and are used only to manage the booking. They are never used for marketing and never shared outside your organisation and our service providers. |
4. Why we use it
- To authenticate you and keep your session secure.
- To provide the features of the app you are using.
- To support and maintain the service, diagnose faults and prevent misuse.
- To meet our legal and regulatory obligations.
We process this data to perform our contract with your organisation, and on the basis of our legitimate interest in operating and securing the service. Where we rely on consent, you may withdraw it at any time.
5. Who we share it with
We share personal data only with:
- Your own organisation — administrators of your organisation’s account can see the records you create.
- Our service providers, including GS Systems Limited as described above, who process data on our instructions and are bound to keep it confidential.
- Authorities or advisers, where we are legally required to disclose it or need to establish or defend legal claims.
6. Where it is held
Data is held on servers in the United Kingdom. If we ever need to transfer personal data outside the UK, we will do so only where the destination is covered by UK adequacy regulations or under an International Data Transfer Agreement.
7. How long we keep it
We keep business records for as long as your organisation holds an account with us, and afterwards only as long as we need them for legal, accounting or dispute-resolution purposes. Session tokens are removed from your device when you log out or uninstall the app.
8. Your rights
Under UK data protection law you have the right to ask us for a copy of your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to how we use it, and to ask us to transfer it to someone else.
Requesting deletion of your data
Email admin@nupoz.com with the subject line “Data deletion request”, telling us which app you use and the organisation you work for. We will respond within one month.
Because these apps hold records belonging to your employer, some data cannot be deleted at your request alone — for example timesheets your employer must keep for payroll or statutory reasons. Where that applies we will tell you why, and delete what we can.
You can remove all locally stored data at any time by logging out or uninstalling the app.
Complaints
If you are unhappy with how we have handled your data, please contact us first. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.
9. Children
These are workplace applications and are not directed at children. We do not knowingly collect personal data from anyone under 16 other than as part of an employment record created by their employer.
10. Security
Access to the apps requires a sign-in issued by your organisation. Data in transit between the app and our servers is encrypted using HTTPS. Access to the underlying systems is limited to staff who need it to run and support the service.
11. Changes to this policy
If we change this policy we will update the effective date at the top of this page, and where the change is significant we will tell your organisation’s account administrator.
12. Contact us
NuPoz Group Ltd, 119–121 Buxton Road, Stockport, Cheshire, SK2 6LR, United Kingdom
admin@nupoz.com