Privacy Policy

1. Who we are

Workcraft Limited (“Workcraft”, “we”, “us”) is the data controller for personal data processed through The EOS UK Directory (the “Service”). We are a company registered in England and Wales. You can contact us about privacy matters via the contact details published on our website.

2. Personal data we collect

• Account data: email address, hashed password, or Google account identifier when you sign in with Google.
• Consent record: a timestamp and version of the Terms & Privacy Policy you accepted at signup.
• Listing data you submit: company name, description, industry, city, website, LinkedIn, logo, EOS^® implementation type, implementer name, and contact details (name, role, email, optional phone).
• Technical data: minimal logs (IP address, user agent, timestamps) generated by our hosting and backend providers for security, debugging, and abuse prevention.

We do not use tracking, advertising or analytics cookies. Only strictly necessary cookies and local storage are used to keep you signed in.

3. How we use your data and the lawful basis

• Provide the Service (create your account, publish your listing, let other users contact you) — performance of a contract with you.
• Moderate submissions using automated review — legitimate interests in keeping the directory accurate and free of abuse.
• Security, fraud prevention, and legal compliance — legitimate interests and legal obligation.
• Record your acceptance of our terms — legal obligation and legitimate interests.

We do not sell your personal data and we do not use it for advertising.

4. Public information

Once a listing is approved, the information you submit about your company — including the contact name, role, email, optional phone, website and LinkedIn — is published publicly so other EOS^® companies can find and contact you. Do not submit information you do not want to be public. You can edit or delete your listing at any time from your dashboard.

5. Who we share data with (processors)

We use a small number of trusted providers acting as data processors on our behalf:

• Our hosting, database, authentication and storage provider (EU/UK & US regions).
• Our AI moderation provider, used only to review listing content.
• Google, if you choose Google sign-in.

Where personal data is transferred outside the UK/EEA, we rely on adequacy decisions or the UK International Data Transfer Addendum / EU Standard Contractual Clauses as appropriate safeguards.

6. Retention

• Listing data: kept while your listing is live and deleted when you delete it.
• Account data: kept while your account is active. Deleted within 30 days of your account deletion request, except where we must retain records to meet a legal obligation.
• Consent records: kept for as long as needed to evidence your agreement.
• Technical logs: retained for a short period by our providers for security.

7. Your rights under UK GDPR

You have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data (“right to be forgotten”);
• restrict or object to certain processing;
• request portability of data you provided to us;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

You can exercise most rights directly from your dashboard (edit or delete your listing). For account deletion or any other request, contact Workcraft Limited using the details on our website and we will respond within one month.

8. Security

We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, row-level access controls on our database, and private storage for uploaded logos. No system is perfectly secure; you use the Service at your own risk within the limits set out in the Terms & Conditions.

9. Children

The Service is intended for business users aged 18 and over. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last updated” date above and, where appropriate, by notice in the app.