Last updated: 30 September 2026
1. Who we are
Operations OS Ltd (company number 17431573), 13 Cholwell Road, Stevenage, England, SG2 9JY, provides Operations OS and NW Network. Contact admin@operationsos.co.uk for privacy questions or requests. A company using Operations OS is responsible for how it uses its own employment and work records. We also handle information to provide personal accounts, NW Network, security and support.
2. Information we use
Depending on the features you use, this includes your name, email, account identifiers, sign-in and security records, profile details and photographs; workplace relationships, roles, availability, shifts, offers, clock times, approved hours, rates, earnings, leave, timesheets and invoice requests; messages, attachments and support enquiries; and NW Network preferences, chosen search area, alerts, introduction, uploaded CV, applications and outcomes. Network may require an age-eligibility confirmation.
It also includes location and accuracy information associated with clocking when permission is granted; the area you choose for nearby Network results; device notification tokens, app/device details and technical or security records; and company billing contact, address, subscription and payment status. Stripe processes card details entered into its payment service. Website enquiries and early-access requests include the details and contact choices you submit, along with limited technical and campaign information.
Please avoid adding unnecessary sensitive personal information to your CV, introduction or messages. If a workplace asks for sensitive information, ask why it is needed and how it will be used.
3. Why we use information
We use information to provide accounts and requested features, connect workers with workplaces, deliver messages and alerts, match nearby opportunities to Network preferences, process applications, manage company subscriptions, provide support and protect the service. We use website enquiries to respond and provide requested access information. If you specifically ask us to review an introduction to your employer, we use the contact details and name-sharing choice you provide to assess that request. No employer message is sent automatically.
Our lawful basis depends on the purpose: providing a requested service under a contract, our legitimate interests in security, reliability and support, a legal obligation, or consent where required for optional contact or processing. Each workplace determines its own purposes and lawful basis for its employment and work records. You can withdraw optional consent without affecting earlier lawful processing.
We record account creation, worker workspace opening dates, company trial and subscription status, and setup progress to understand service uptake. The private growth dashboard shows aggregate counts and excludes designated test accounts. We do not use email tracking pixels.
Account welcome and factual trial notices are separate from optional worker tips, employer-invitation reminders and company setup help, plan and Network offers, monthly tips, updates and new product announcements. Optional email choices are unticked by default. You can manage them at Email preferences or unsubscribe from tips, offers, updates and trial notices using the link in those messages. Sign-in, security and essential work messages remain available. We retain limited delivery, permission and suppression records to honour your choices and avoid repeated unwanted messages. We do not automatically email employers on a worker’s behalf.
4. Who can see information
Authorised workplace users can access information needed for their role in that workplace. Companies cannot browse private worker profiles through NW Network. When you apply for a job or shift cover, the company receives the application and the profile, introduction or CV information you choose to share. Check your choices before applying. Information already shared in an application may remain with that application even after you edit your profile. Accepting work can create a workplace relationship and associated work records.
Messages are available to their intended participants. Our personnel may access relevant information for support, security and service operation. We may disclose information where law requires it or to establish or defend legal claims.
5. Location and notifications
Location helps verify clocking and lets you choose an area for nearby Network results. The app does not continuously track your location in the background. Your device controls location permission, and a clock record may show that location was unavailable. Notification permission is optional and can be changed in device settings. Turning it off does not remove shifts or messages from your account. Push services process device tokens and alert content to deliver notifications; your device settings control lock-screen previews.
6. Providers and international processing
We use Google Cloud and Firebase for hosting, storage, authentication and Android notifications; Apple services for supported sign-in, app verification and iPhone/iPad notifications; Resend for account and work emails and optional tips, updates and offers you choose; HubSpot to record website enquiries and organise individual follow-up tasks; Cloudflare for the website and website analytics; Google Analytics 4 for optional website analytics when you allow it; Stripe for company billing; Geoapify for address search; and OpenStreetMap tiles for maps. A website enquiry does not by itself subscribe you to marketing emails. A worker's employer nomination does not give us permission to contact that employer. Map services receive the requested area and connection information needed to return results. OpenStreetMap Foundation operates its tile service under its own privacy notice.
Although primary work data is stored in a London cloud region, some providers and support services may process information outside the UK. Where required, we use applicable provider data-processing terms and recognised transfer safeguards, including contractual clauses or UK addenda. Contact us for more information about transfers relevant to your data.
7. Retention and account deletion
You can request account deletion in the app settings or contact us if you cannot access your account. The app explains the effect and offers a seven-day recovery period. After that period, the deletion process removes private profile, Network preference and CV data and redacts application profile snapshots. Sent message content is removed through deletion unless held for a specific reason. Company work records, recipient copies and restricted audit records may remain where needed for workplace records, other participants, security investigations, disputes or legal obligations. Deleting your account does not instantly erase every backup or company-held copy.
Ordinary eligible work-history bundles are subject to a 24-calendar-month default. At least 30 days before removal, eligible workers and company administrators receive a private notice and access to an export. Changed or incomplete records, active balances, newer linked work, disputes and legal holds are preserved for review. Other categories, including messages, support, security records, website enquiries and provider copies, are kept only while needed for the relevant service, request, investigation or legal requirement and are reviewed under their separate rules; they are not all deleted automatically at 24 months.
8. Your choices and rights
You can update your profile, change Network preferences and sharing choices, turn off optional notifications and request account deletion. Depending on the law that applies, you may request access, correction, erasure, restriction or portability, or object to processing. We may verify your identity before responding. Where a workplace controls a record, we will explain how to contact it or help route your request.
You may complain to the UK Information Commissioner’s Office or your local data-protection authority.
9. Storage, analytics and changes
The app uses local storage and similar technology for sign-in, preferences and offline clock records waiting to sync. The website uses Cloudflare Web Analytics to understand aggregate performance. If you allow optional analytics, Google Analytics 4 also measures page visits and actions such as opening a trial or worker-profile page and submitting an interest form. Google Analytics may set analytics cookies. We send no names, email addresses or form answers in these events, and advertising tracking is disabled. You can change your choice at any time using “Analytics settings” on this site. Read how Google uses information from sites that use its services. We will update this notice as the service changes and show the latest date on this page.