Sarge-P Privacy Policy

Sarge-P is provided by P-SaaS Ltd ("we", "us", "our"), a company registered in England and Wales (company number 17130373).

Sarge-P is used by venues, staffing agencies, and the staff and agency staff they engage. Where a venue or agency inputs data about their own staff (rotas, contact details, pay rates, agency spend figures, etc.), that organisation is the data controller and is responsible for having a lawful basis to collect and use it — we process it on their behalf as a data processor. We act as data controller for account-holder and billing data, for how the platform itself is used, and for visitors to our public marketing site (including community email signups and live chat).

If you're a staff member or agency worker and have a query about your own employment records held in Sarge-P, please contact your employer or agency in the first instance — we support them in responding to data requests.

• Identity and contact details: name, email, phone number, date of birth
• Employment and scheduling data: role, assigned areas, shifts, availability, holiday requests and accrual, attendance and check-in/check-out records
• Agency spend and billing figures, for reconciling agency invoices against event staffing
• National Insurance numbers, stored encrypted
• Bank details for agency staff payment, stored encrypted
• Pay rates and payroll figures, exported by venue admins for payroll purposes
• A one-off location reading captured at sign-in/sign-out to confirm on-site attendance (not continuous tracking)
• Shift cancellation, no-show and related administrative notes
• Uploaded briefing documents, checklists, uniform reference images and venue maps
• Account and usage data: hashed login credentials, session data, IP address and browser/device information
• Billing contact details (we do not store full card numbers ourselves — see Stripe, below)
• Marketing site signups: name and email when you join our community update list on the public website — stored in our PostgreSQL database (hosted on Railway)
• Live chat on the marketing site: messages you send via our Crisp chat widget, plus technical data Crisp collects to operate the chat (see below)

To run the core service: staffing plans, shift assignment, sign-in/sign-out, attendance tracking, payroll export, agency spend reporting, holiday accrual and payroll support, operational notifications, exportable records for authorised venue admins, billing, platform security, and meeting our legal obligations under employment law. On our public marketing site, we also use contact details from community signups to send occasional product updates (you can unsubscribe by contacting us), and we use live chat to answer pre-sales questions.

Performance of a contract with you or your employer/agency; legal obligation (payroll and employment law requirements); legitimate interests (operating and securing the platform); and consent where specifically requested.

We do not sell personal data. On the signed-in platform we do not use third-party analytics or advertising tracking. On the public marketing website, we may use analytics and advertising technologies (for example Meta Pixel or similar tools) only where you have given consent via our cookie banner. Crisp is used only for live chat support on the public website — not for analytics or ad targeting.

WhatsApp contact links open a pre-filled chat on your own device — we don't send messages via WhatsApp's business platform ourselves, and no data passes to WhatsApp/Meta through us as a result.

On the signed-in platform we use only strictly necessary, functional cookies (to keep you signed in, and to remember your selected venue). On the public marketing site we use essential cookies so the site works, and Crisp may set functional cookies to remember your chat session. Analytics and marketing cookies are optional: we only set or load them if you choose "Accept optional cookies." You can reject optional cookies, or change or withdraw that choice later via Cookie settings in the site footer. Essential functionality continues to work either way.

We keep personal data for as long as your account, or your employer's/agency's account, is active, and for a further period afterward where needed to meet legal obligations (including employment record-keeping requirements) or resolve disputes. Community email signups are kept until you ask us to remove them or we retire the list. Crisp chat transcripts are retained according to Crisp's settings and our support needs.

Under UK GDPR you can ask to access, correct, or erase your data, object to or restrict certain processing, and request a portable copy of it. You can also complain to the Information Commissioner's Office at ico.org.uk. If your data was added by your employer or an agency, please contact them first.

Sarge-P is a workplace platform intended for use by working-age individuals. We do not knowingly collect data from children.

We may update this policy from time to time; the "last updated" date above will reflect any change.

P-SaaS Ltd — [privacy contact email]