Who we are
InishForce is a construction workforce, safety and compliance platform operated in Ireland. For any privacy question or request, contact us at privacy@inishforce.com.
Our role under GDPR
Each customer company decides what information about its workers, projects and sites is stored in its workspace. For that workspace data the customer company is the data controller and InishForce is the data processor, acting only on the customer's instructions (see our Data Processing Agreement). For our own customer account, billing, enquiry and support data, InishForce is the data controller.
Data we process
- Account and identity: name, email address, phone number, role and job title.
- Workforce records: certificates, internal learning records, timesheets, attendance and time-off requests.
- Location: a single GPS reading taken only when a user clocks in or out, or raises an emergency alert. We do not track location continuously.
- Site records: forms, inspections, incident reports, photos, documents and signatures.
- AI Assistant (if enabled by the company): the questions and photos a user submits. We do not intentionally send names or identifiers with them.
- Technical data: sign-in events, audit logs and error reports, used to keep the service secure and working.
Why we use it and our legal basis
- To provide the service a customer has signed up for — performance of a contract (GDPR Art. 6(1)(b)).
- To help customers meet their legal duties, such as record-keeping under the Safety, Health and Welfare at Work Act 2005 — legal obligation of the customer (Art. 6(1)(c)).
- To secure the platform, prevent misuse and provide support — legitimate interests (Art. 6(1)(f)).
- To keep accounting and tax records — legal obligation (Art. 6(1)(c)).
We do not sell personal data and we do not use it for advertising. The service does not make automated decisions about anyone's employment, pay or safety.
Who we share it with
We use carefully selected service providers ("subprocessors") under written agreements that require them to protect the data:
- Cloud hosting, database, sign-in and file storage providers.
- An email delivery provider, for invitations, alerts and password resets.
- Stripe, for card payments.
- AI model providers, only when a company has the AI Assistant switched on.
Some providers may process data outside the European Economic Area. Where that happens, we rely on an EU adequacy decision or the European Commission's Standard Contractual Clauses. A current list of subprocessors is available on request.
How long we keep it
Workspace data is kept for as long as the customer's subscription is active. When a subscription ends, the customer can ask for an export, after which the workspace data is deleted, except where the law requires records to be kept for longer. Records a customer is legally required to keep (for example accident and safety records) are never deleted automatically. Billing records are kept for six years, as required under Irish tax law.
Your rights
You have the right to access, correct, delete, restrict, move (portability) and object to the processing of your personal data. If your employer uses InishForce, please contact your employer first, as they control your workspace data — we will help them respond. You can also email privacy@inishforce.com. We aim to respond within one month.
You have the right to complain to the Data Protection Commission: www.dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.
Security
Data is encrypted in transit. Each company's data is kept separate and protected by access rules enforced in the database. Files are stored privately and shared only through short-lived links, permissions depend on each user's role, and important actions are recorded in an audit log. InishForce staff only access a workspace to provide onboarding or support, and every such access is logged.
Cookies
We only use storage that is strictly necessary to keep you signed in and to remember your settings. We do not use advertising or tracking cookies.
Changes
If we make important changes to this policy, we will update the date above and let customers know within the app.