Privacy Policy

Effective date: 8 September 2026

Concreet Hygiene, operating through concreet.eu and the ConcreetHR mobile application (“we”, “us”, or “our”), respects your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our website, employee portal, or mobile application.

1. Information we collect

Depending on the services you use, we may collect:

  • Account and employment information, such as your name, email address, phone number, employee ID, role, company, and branch.
  • Attendance and shift information, including check-in and check-out times, break records, assigned sites, shift details, attendance notes, and approval history.
  • Precise location data, including latitude, longitude, time, accuracy, and location history, when you check in, check out, or when live location tracking is enabled during an active work shift.
  • Camera images and selfies when required for attendance verification, site check-in, check-out, or work evidence.
  • QR-code scan information used to verify attendance at a client site or break area.
  • Device and technical information, such as device type, operating system, app version, device security status, IP address, and diagnostic information.
  • Notifications and communication data, including push-notification tokens and messages sent through workplace communication features.
  • Files, images, or other content that you voluntarily upload through the app or website.

2. Why we use your information

We use personal information to:

  • Provide the ConcreetHR workforce, attendance, and site-management services.
  • Authenticate users and secure accounts.
  • Record, verify, review, and manage attendance, working time, breaks, shifts, and site access.
  • Confirm that check-ins and check-outs occur at the appropriate work location.
  • Enable live tracking only during active work-related sessions where this feature is enabled by the employer.
  • Detect attendance exceptions, location or geofence issues, fraud, safety concerns, and operational risks.
  • Send work-related alerts, reminders, shift updates, and notifications.
  • Provide support, resolve technical issues, improve reliability, and protect our systems.
  • Meet legal, regulatory, contractual, and record-keeping obligations.

We do not use precise location, selfies, or attendance data for advertising.

3. Location data

The ConcreetHR app may collect precise location data when you use attendance or live-tracking features.

Location data may be collected:

  • When you check in or check out.
  • While an active shift is in progress, if your employer has enabled live tracking.
  • In the background during an active shift, where you have granted background-location permission.

Location data is used only for workforce-management purposes, including attendance verification, site geofencing, live operational tracking, staff safety, and service delivery. You can disable location permission in your device settings, but attendance, live tracking, or other location-dependent features may then be unavailable.

4. Camera and photos

The app may request camera access to capture a selfie, scan a QR code, or upload work-related images. These images may be used for identity verification, attendance verification, service-quality evidence, operational records, or fraud prevention.

Camera access is only used when you choose to use a feature that requires it or when your employer requires it for a specific attendance or work-verification process.

5. Notifications

If you allow notifications, we may send work-related alerts such as shift reminders, attendance updates, approvals, break reminders, operational notices, and safety-related messages. You can manage notification permissions in your device settings.

6. How we share information

We may share personal information only where necessary with:

  • Your employer, authorised managers, HR staff, supervisors, and administrators using ConcreetHR.
  • Client-site managers where required for delivery, attendance, security, or operational verification.
  • Service providers that help us operate the platform, such as cloud hosting, technical support, notification, mapping, and security providers.
  • Authorities, regulators, insurers, or professional advisers where required by law or necessary to protect legal rights, safety, or security.

We do not sell personal information.

7. Data security

We use reasonable organisational and technical safeguards designed to protect personal information from unauthorised access, loss, misuse, alteration, or disclosure. Access to sensitive workforce information is limited to authorised users with a legitimate business need.

No system is completely secure, and we cannot guarantee absolute security.

8. Data retention

We keep personal information only for as long as necessary for the purposes described in this policy, including employment administration, attendance records, operational reporting, legal obligations, dispute resolution, security, and audit requirements.

Retention periods may be set by your employer, applicable law, or contractual requirements.

9. Your rights

Depending on your location and applicable law, you may have the right to:

  • Request access to your personal information.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of information where legally permitted.
  • Object to or restrict certain processing.
  • Request a copy of your information.
  • Withdraw optional permissions, such as camera, notification, or location permissions, through your device settings.

Some information may need to be retained where required for employment, legal, security, fraud-prevention, or administrative purposes.

10. Employer-controlled data

If you use ConcreetHR through your employer, your employer may be responsible for deciding why and how your workforce data is processed. For requests about your employment records, attendance records, shifts, or company policies, please contact your employer or HR department first.

11. Cookies and website analytics

This website does not use advertising or tracking cookies, and it loads nothing from servers of third parties. The only cookie it places is a functional one that remembers the language you selected; it contains no personal data.

We do measure how many people visit the website and which pages are read most, so that we know which information is useful. This is done with statistics software that runs on our own server within the European Union. The data stays there and is not shared with other parties.

  • no cookies are placed for these statistics and nothing is stored on your device;
  • your IP address is made unrecognisable before it is stored;
  • before that, we derive an approximate location from your IP address (country, region and city), using a database on our own server; no data is sent to another party for this;
  • we record which pages you viewed, for how long, through which website or search engine you arrived, and what type of device, browser and screen size you use;
  • we do not follow you across other websites and do not build a profile of you;
  • if your browser sends a “Do Not Track” signal, we do not measure your visit;
  • individual visit data is deleted after 180 days; after that, only totals remain.

Legal basis: our legitimate interest in a well-functioning and usable website (Article 6(1)(f) GDPR).

This website, and the messages you send through its contact forms, are hosted on servers within the European Union. Form messages are stored there and forwarded to us by e-mail.

12. Children’s privacy

ConcreetHR is a workplace-management platform and is not intended for children. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available at https://concreet.eu/privacy-policy. Where required, we will provide additional notice of significant changes.

14. Contact us

For privacy questions, requests, or concerns, contact:

Concreet Hygiene
Website: https://concreet.eu
Email: [insert your privacy contact email]