Privacy Policy

Last updated: 17 August 2026

1. Introduction

Nuelo CoLab Ltd ("Fortis", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workforce operations platform ("Service").

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our Data Protection Officer can be contacted at hello@fortis.app.

2. Information We Collect

We collect the following categories of information:

• Account Information: Company name, your name, email address, and password when you register
• Staff Data: Employee names, positions, contact details, hourly rates, certifications, and documents that you or your staff upload
• Operational Data: Shift schedules, attendance records, timesheets, incident reports, and site information
• Location Data: GPS coordinates when staff clock in via QR code (only when the employee consents to location sharing)
• Payment Information: Billing details processed by Stripe; we do not store credit card numbers on our servers
• Usage Data: How you interact with the Service, including pages visited, features used, and device information

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process your subscription payments
• Send you service-related notifications (shift reminders, incident alerts, invoice updates)
• Provide customer support
• Detect and prevent fraud or unauthorised access
• Comply with legal obligations

4. Data Sharing

We do not sell your personal data. We share your information only with:

• Service Providers: Stripe (payment processing), Resend (email delivery), Cloudinary (file storage), Vercel (hosting)
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with any merger, acquisition, or sale of company assets

5. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we will delete or anonymise your data within 90 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes).

7. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Restriction: Request restriction of processing of your personal data
• Portability: Request transfer of your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or direct marketing

To exercise these rights, contact us at hello@fortis.app.

8. International Transfers

Our Service is hosted on servers in the European Union. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Cookies

We use essential cookies to maintain your session and authentication state. We do not use advertising cookies or sell cookie data. Analytics cookies are used only with your consent.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or sending an email to the address associated with your account.

11. Contact

For privacy-related inquiries or to exercise your data rights, contact:

Nuelo CoLab Ltd
167-169 Great Portland Street
London, W1W 5PF
Email: hello@fortis.app