Privacy notice
Provisional draft · 2026-10-17-draft-1 · 17 October 2026
1. Who is responsible
The LetX platform operator’s legal identity, address and privacy contact are still being confirmed. This is a provisional notice, not a claim of completed regulatory compliance. Use the Contact page for privacy enquiries. For operational records, your organisation generally determines why information is used; the operator generally processes that information on its instructions. Roles must be confirmed in the final agreement.
2. Information handled
LetX may handle account and contact details, organisation configuration, job and property records, reports and photographs, contractor details, messages and attachments, scheduling and location information when enabled, HR and leave records, financial documents, preferences and acceptance records. Some records can include sensitive personal information. Submit only what is necessary and lawfully authorised.
3. Purposes and legal bases
Information supports registration review, account access, operational workflows, communications, support, security and compliance with applicable obligations. Depending on the activity and controller, applicable bases may include contract, legitimate interests, legal obligations or separately obtained consent. Organisations must establish their own basis, including any additional condition for health or other special-category data. Reading this notice is acknowledgement, not blanket consent to processing.
4. Sharing and connected services
Authorised organisation users see information according to their access. Recipient-specific communications go to the selected people. Hosting, authentication, storage, messaging and AI providers may process data needed to deliver enabled functions; connected providers receive data within authorised scopes. Platform support access is subject to applicable client approval controls. We do not claim a complete approved subprocessor register in this draft.
5. AI and automation
AI requests can send the submitted task content to an AI service. Avoid unnecessary sensitive data and review drafts. Automated workflows may send job events and updates. Do not treat drafts or workflow outputs as a final employment, legal, safety or other significant decision without appropriate human review. Provider retention and training arrangements must be verified before sensitive deployments.
6. Retention and international transfers
Records are kept according to operational purpose, account lifecycle and applicable obligations. Exact retention periods, deletion handling, backup schedules, processing locations and any international transfer safeguards must be confirmed with providers and documented before finalisation; no UK-only storage or fixed deletion guarantee is asserted.
7. Your rights
Subject to applicable law, individuals may request access, correction, erasure, restriction, portability or object to relevant processing. Withdraw optional consent without affecting earlier lawful processing. Contact your organisation for its operational records or use the Contact page for platform account enquiries. UK individuals may complain to the Information Commissioner’s Office (ico.org.uk); other jurisdictions have their own authorities.
8. Preferences and security
Marketing and product-update choices are separate and can be changed in Notification settings. Essential service communications are not marketing consent. Account permissions, secure access and careful handling support confidentiality but no system can guarantee absolute security. See the Cookies & storage and Security statements.