The client running the sites controls the data about its contractors and their workers; Res Digital processes it for them. Contractors choose which clients see their profile.
Who we are
Assured Contractors is run by Res Digital, registered in England and Wales. This notice explains how personal data is processed through the Assured Contractors platform and this website, assured.contractors.
For anything in this notice, use our contact form.
Controller and processor
The client organisation is the data controller for operational data processed through the platform, including contractor records, workers' cards and uploaded documents. Res Digital acts as the data processor under a data processing agreement with each client.
A contractor company manages its own contractor workspace and chooses which clients can see it: by entering a client's company code, or by giving a client its own contractor code.
For enquiries and demo requests sent through this website, Res Digital is the data controller.
What data is processed
Depending on how a client uses Assured Contractors, the platform processes:
- names, work email addresses, phone numbers and job roles of users, contractors' staff and site contacts;
- company details, including Companies House number and status;
- workers' qualification cards — card type, number, expiry date and photos or PDFs of the card;
- documents contractors upload, such as insurance certificates, policies, risk assessments, method statements and accreditation certificates;
- vehicle registrations, with DVLA tax and DVSA MOT information;
- site records: bookings, permits, gate decisions, check-in and check-out times and muster roll calls;
- visitor sign-in details — name, company, host, and a photo and signature where the site asks for them;
- incident reports, including details of injured persons and photos;
- messages sent in the platform and an audit log of actions.
Through this website we collect what you enter in the enquiry form: name, email, company, phone, role, enquiry type and message.
Health information
Incident reports can include information about injuries, which is health data. It is only processed where a client uses incident reporting to meet its health and safety obligations, including RIDDOR, and incidents can be marked confidential to limit who sees them.
Lawful basis
Operational data is processed on the basis of the client organisation's legitimate interests in contractor assurance and workplace safety, or where needed to comply with health and safety law. Website enquiry data is processed on the basis of the consent you give when you send the form.
How long data is kept
- Audit events: 7 years from creation.
- Uploaded documents: for the length of the contractor relationship plus 3 years.
- Results of checks against public registers: 2 years from the check.
- User accounts: until a deletion request, plus 30 days for technical processing.
- Website enquiries: 2 years from submission.
All retention periods are subject to legal hold where it applies, and a client's agreement may set longer or shorter periods for some kinds of data.
Your rights
Under UK data protection law you can ask for access to, correction of, restriction of processing of, or deletion of your personal data, and you can object to some processing.
For operational data, contact your employer or the client organisation first, as they are the controller. For website enquiries, or to exercise your rights with Res Digital directly, use our contact form. We respond to valid requests within one month.
You can also complain to the Information Commissioner's Office at ico.org.uk.