Privacy notice

Who we are

Bonim is operated by 24-7 LOGISTICS AND SERVICES UK LTD, a company registered in England and Wales, company number 10426878, registered office 1st Floor North Westgate House, Harlow, Essex, CM20 1YS. Our VAT number is [TBC: VAT registration number].

We are registered with the Information Commissioner's Office under registration [TBC: ICO registration number].

Our data protection contact is [TBC: data protection contact name], and anything in this notice can be raised with them at [TBC: data protection contact email].

This website

This site is brochure pages and a sign-in link. It is worth being specific about how little it does, because most privacy notices are vague about it:

• It sets no cookies. Rendering a page here cannot write one — the code that reads your browser on these pages has no ability to set anything.
• There is no analytics and no tracking pixel, and opening a page here loads nothing from any other company.
• There is one exception, and it only happens if you ask for it. If you click Book a call, the booking calendar is loaded from Cal.com, the scheduling service we use. From that moment your browser is talking to Cal.com as well as to us: they receive your IP address and browser details, as any website you visit does, and what you type into the booking form goes to them and to us so that the call can be arranged. Until you click, Cal.com is not contacted at all. Our cookie policy lists the cookies they set.
• Apart from that calendar there are no forms, so there is nothing here for you to submit.
• Our hosting keeps ordinary server logs, which include IP addresses, for security and to keep the service running.

When you sign in

Signing in sets cookies that keep you signed in. They are necessary for the service to work and are not used for advertising or analytics. Our cookie policy lists exactly what they are and how long they last.

If you have an account, we hold the email address you sign in with, and a record of your sign-ins for security.

If you work through an agency that uses us

This is where most of the personal data on the platform comes from. A staffing agency registers you, and the platform then holds what is needed to place you on work and pay you correctly.

That includes your name and contact details, your right-to-work check, the cards and qualifications that let you work on a site, the shifts you worked and the hours you submitted, and what you were paid. It also includes your National Insurance number and bank details, which are held separately and are readable only by you and by the payroll function of an agency that currently employs you.

Who is legally responsible for that data — the agency, Bonim, or both, and in which respects — is being confirmed with our advisers and will be stated here precisely before this notice is final. We would rather leave it blank than guess at it.

Your record can follow you between agencies, and it does so only where you have agreed to it. That agreement is per agency, you can see every one you have given, and you can withdraw any of them. Withdrawal takes effect the next time anybody looks, not overnight. No agency can browse another agency’s workers.

Your rights

Under UK data protection law you can ask us for a copy of your personal data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to us processing it, and ask for it in a portable form.

Write to [TBC: data protection contact name] at [TBC: data protection contact email] and we will respond within one month. Some of these rights are limited where we have to keep records by law — payroll and tax records are the main case.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113. You do not have to raise it with us first, although we would like the chance.

How long we keep it

Payroll, tax and right-to-work records have retention periods set by law and we keep them for as long as required. The specific periods are [TBC: retention schedule, per record type].

Data we are not required to keep is deleted or anonymised when the reason we held it has ended.

Security

Access to data on the platform is enforced by the database itself rather than by application code, so an agency cannot reach another agency’s records even if something above the database is wrong. The most sensitive fields — bank details and National Insurance numbers — are reachable through a single narrow route that answers only for the person asking about themselves.

No system is perfectly secure, and we do not claim otherwise. If something goes wrong that affects you, we will tell you and the ICO where the law requires it.

How to reach us

Anything about this notice, or about your own data, goes to [TBC: data protection contact name] at [TBC: data protection contact email] — that is the quickest route and the one we watch.

If you would rather write to an office, or speak to somebody:

• London — [TBC: London street address], London, [TBC: London postcode]. [TBC: London office email], [TBC: London office phone].
• Essex (registered office) — 1st Floor North Westgate House, Harlow, Essex, CM20 1YS. [TBC: Essex office email], [TBC: Essex office phone].

Changes

When this notice changes we update the date at the top. If a change materially affects you we will tell you rather than relying on you re-reading the page.