Privacy Policy

Last updated: 24 May 2026

NekaID is a UK construction workforce verification and site management platform. This Privacy Policy explains how we collect, use, store, and protect personal data when workers, companies, site managers, and visitors use our service.

1. Who we are

NekaID operates through https://www.sitepassportapp.co.uk. During our rebrand to NekaID, some services may also be found athttps://www.nekaid.co.uk.

For privacy or legal questions, contact us at:
Email: info@nekaid.co.uk

2. What personal data we collect

We may collect and store the following information:

• Name
• Email address
• Phone number
• Job role / trade
• Company name
• Profile photo or uploaded card/certificate images
• CSCS card details and expiry date
• Right to Work expiry date
• Qualification names, card numbers, and expiry dates
• Worker passport QR code and public scan link
• Company saved worker records
• Site attendance sign-in and sign-out records
• Visitor sign-in and sign-out records
• GPS/location verification data used for site attendance checks
• Induction request and completion status
• Login/account information handled through Supabase authentication

Medical information provided by operatives is optional and collected only for health and safety purposes on construction sites. This data is considered sensitive and is securely stored. It is visible only to authorised company users, such as site managers, and is not shared publicly or used for automated decision-making.

3. How we use your data

We use your data to:

• Create and manage worker passport profiles
• Allow workers to show credentials and expiry dates
• Allow companies to scan and save worker passport records
• Show expiry status such as Valid, Expiring, or Expired
• Provide QR code verification features
• Provide site sign-in and sign-out features
• Help companies monitor who is currently on site
• Support visitor sign-in and sign-out records
• Send and track induction requests
• Provide login, signup, password reset, and account deletion features
• Improve safety, onboarding, and document visibility on construction sites
• Maintain and secure the NekaID platform

4. Legal basis for processing

We process personal data under the following legal bases:

• Contract performance — processing necessary to create and manage accounts, deliver the NekaID service, and fulfil platform features requested by the user.
• Legitimate interests — processing necessary for platform security, fraud prevention, site safety records, and improving the reliability of the service, where these interests are not overridden by individual rights.
• Legal obligation — processing necessary to comply with applicable laws, including the retention of compliance, attendance, and workforce records where legally required.
• Consent — where workers voluntarily provide optional information such as medical details, which is collected only on the basis of explicit consent and for health and safety purposes on construction sites.

5. Data controller

NekaID acts as the data controller for worker and company personal data processed through the platform. Where companies use NekaID to manage their own workforce data, they may also act as data controllers in their own right and are responsible for ensuring their use of the platform complies with applicable data protection law.

6. Who can see your data

Workers can create and manage their own passport information. Companies can view worker information when they scan a worker QR code or save a worker to their company dashboard.

A worker public scan page may be visible to anyone who has the worker’s QR code or public scan link. Do not share your QR code or public link with anyone you do not trust.

7. GPS and location data

NekaID may use GPS/location data when workers or visitors sign in or sign out of a site. This is used to support attendance verification and site safety records.

NekaID does not continuously track users in the background.

8. Qualification and verification data

Workers may upload qualification information, certificates, cards, or supporting documents. Unless a record is clearly marked as verified by NekaID, uploaded information should be treated as self-declared.

Companies remain responsible for carrying out their own workforce compliance, Right to Work, CSCS, and site safety checks where required.

9. Where your data is stored

NekaID uses Supabase for authentication and database storage. The platform may also use services such as Vercel and other hosting, email, or infrastructure providers. Data may be stored on secure cloud infrastructure used by our service providers.

10. How long we keep data

We keep personal data for as long as your account or passport profile is active, or as long as needed to provide the service, meet legal obligations, resolve disputes, maintain security, and support compliance records.

11. Your rights

Under UK data protection law, you may have rights including:

• The right to access your personal data
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to restrict processing
• The right to object to certain processing
• The right to data portability
• The right to complain to the Information Commissioner’s Office

12. Account deletion

Users may request or use available account deletion features to delete their account and associated personal information. Some records may be retained where legally required or where needed for security, audit, or compliance purposes.

13. Security

We take reasonable steps to protect personal data, including secure authentication, HTTPS, hosted database services, and access controls. No online service is 100% secure, so users should protect their login details and only share QR codes responsibly.

14. Children

NekaID is intended for construction workers, companies, site managers, contractors, and authorised visitors. It is not intended for children.

15. Changes to this policy

We may update this Privacy Policy as NekaID grows. The latest version will always be available on this page.

16. Contact

For privacy requests or questions, email:
info@nekaid.co.uk

NekaID is registered with the Information Commissioner’s Office (ICO) under registration number: ZC135297.