Privacy Notice

1. Who is responsible for your information

YG Studio operates SiteNorth and is responsible for the personal information described in this notice except where a customer organisation acts as the controller for its own project information. Before launch, the final notice must state the complete legal entity, service address and the controller/processor position for each use.

Privacy questions and rights requests can be sent to legal@sitenorth.app.

2. Information SiteNorth may hold

• account details such as name, email, optional mobile number, profile photo and job information;
• Workspace, Project, Site, team, role and invitation information;
• Tasks, messages, documents, photos, voice notes, surveys, issues, reports, comments and related history;
• access, security, device, session, delivery, synchronisation and error information needed to protect and operate the service;
• support requests, preferences and communications; and
• essential Project and Site information saved on a device for short periods without signal.

3. Why the information is used

SiteNorth uses personal information to:

• create and secure accounts and provide authorised access;
• deliver project collaboration, evidence and communication features;
• send essential account, access, security and approved project notices;
• prevent misuse, investigate incidents and maintain reliable records;
• provide support, recover from failures and improve accessibility and performance; and
• meet legal, regulatory, contractual and record-retention duties.

4. Lawful bases

The final reviewed notice will map each purpose to the correct UK GDPR lawful basis. Expected bases include performance of a contract, legitimate interests in providing and securing the service, and legal obligations. Consent will be used only where it is genuinely optional and can be withdrawn. Accepting the Terms or acknowledging this notice is not treated as blanket consent for every use of personal data.

5. Who information is shared with

Information is shared with authorised members of the relevant Workspace, Project, Site or conversation according to their role. It may also be processed by carefully selected hosting, authentication, storage, email, monitoring and support providers acting under contract. The final notice must identify the launch provider list, international-transfer safeguards and any independent recipients.

SiteNorth does not sell personal information. Open and click tracking will not be used for important service emails under the approved launch policy.

6. How long information is kept

Retention depends on the type of information, Project lifecycle, contractual need, legal duties and any legal hold. Until the written retention schedule is approved, protected project evidence is kept for the Project lifetime and is not automatically purged. Deleted recoverable items use the approved 30-day bin unless an earlier controlled purge or legal hold applies. The final notice must publish the approved periods or the criteria used to set them.

7. Offline information on your device

When an authorised user opens a Project or views its Site Info, SiteNorth may save essential information in that browser or device for short periods without signal. SiteNorth will show when it was last synchronised and when sensitive Site information expires. Saved information is removed on sign-out where the platform permits, and access is checked again when the connection returns. Protect the device with its available lock and security features and report a lost device promptly.

8. Your choices and rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to processing, receive portable information and complain about how your information is used. Some project evidence may need to be retained or de-identified rather than deleted. SiteNorth will explain any applicable limit when responding to a request.

You may also complain to the Information Commissioner's Office.

9. Security, children and changes

SiteNorth uses access controls, authentication, audit history and other safeguards intended to protect information. No online service can guarantee absolute security. SiteNorth is intended for authorised professional project users and is not directed at children.

Each published notice will show its version and effective date. Material changes will be brought to users' attention and renewed acknowledgement or consent will be requested where required.