Privacy notice

Your contractor decides what is collected about you and why (the “controller”). Subbo is the software they use, and handles your data only on their instructions (the “processor”). Subbo never holds or moves your money.

• Name, phone, email, photo
• UTR and National Insurance number
• Bank details
• Invoices, hours and payments
• Right to work documents and check records
• CSCS cards, tickets and insurance

Sensitive numbers are hidden on screen by default.

So your contractor can pay you, deduct CIS tax and report it to HMRC, and to meet the law on right to work checks. The main legal reasons are your contract and legal obligations. Your photo and notification choices are optional.

• Payment and CIS deduction records. The contractor must keep these for HMRC. We can't delete them until the legal period ends.
• Right to work check records. Employers must keep these for the whole engagement plus 2 years.
• Audit log. It protects you and the contractor if there is a dispute or a fraud.

Right to work records are deleted 2 years after your engagement ends. Photos, messages and contact details are deleted when you leave or ask us to.

Only your contractor's owner and managers, and you. Managers can't see bank details. We share data with HMRC where the law requires it. We don't sell your data or use it for advertising.

You can see your data, get a copy, ask us to correct it, or ask us to delete it. Open Me, then My data to download a copy; to correct or delete something, tell your contractor. We reply within 30 days. You can also complain to the Information Commissioner's Office (ico.org.uk).