Privacy Policy

Data Controller: Opus Platforms Limited (trading as "Opus")

Opus is a PAYE staffing agency that connects UK employers with qualified gig workers through our web platform and WhatsApp. This policy explains how we collect, use, and protect your personal data in compliance with UK GDPR and the Data Protection Act 2018.

2.1 Worker Registration

2.2 Identity Verification (Right to Work)

2.3 DBS Background Checks

2.4 Employment & Attendance

2.5 Financial Data

2.6 Employer Data

2.7 Automatically Collected

We process your data for these purposes:

4.1 What AI Can Do

• Workers (27 tools): Browse shifts, check earnings, view compliance status, manage availability
• Employers (30 tools): View shift fill rates, check worker compliance, approve timesheets
• All users: Get instant answers to platform questions 24/7

4.2 What AI Cannot Do

4.3 Data Processing

• Queries processed by: Anthropic (Claude) under strict data processing agreements
• Data shared: Your query text, user role, relevant context (shift data, compliance status)
• Data NOT shared: Passwords, full bank details, biometric data
• Translation: If you set a language preference, platform communications (e.g., WhatsApp notifications) are translated using AI processing by our LLM providers
• Retention: AI queries logged for 2 years for audit/improvement

4.5 AI Governance & Human Oversight

Opus operates a tiered AI governance framework ensuring appropriate human oversight for all AI-assisted actions:

High-impact actions (Tier 2) are never executed automatically. They are proposed by the AI system and routed to the Ops Approval Workbench, where an authorised Opus team member must review and explicitly approve before execution. All AI tool executions - including approvals and rejections - are recorded in a permanent audit log retained for 6 years in accordance with UK employment law and ICO accountability obligations.

4.6 Model Training & Improvement

We use de-identified and anonymised interaction data to improve our internal AI models for:

• Intent routing: Understanding what users are asking (e.g., "show my shifts" vs "check my pay")
• Safety classification: Detecting and routing high-risk requests to human review
• Tool extraction: Improving accuracy of structured parameter extraction from natural language

Opt-out: You may opt out of your interaction data being used for model training at any time by contacting compliance@opusplatforms.co.uk or via Account Settings → Privacy → AI Data Preferences. Opting out does not affect your access to AI features.

4.7 Your Controls

You can opt out of AI features by contacting support. Core platform functionality remains available without AI assistance.

5.1 Service Providers (Data Processors)

5.2 Employers (Joint Controllers)

When you accept a shift, we share with that employer:

• Your name, phone number, and email
• Compliance status (RTW verified, training completed)
• Attendance records (clock times, GPS coordinates if enabled)
• Performance ratings from previous shifts

Joint Controller: Both Opus and the employer are responsible for your data during assignments. Contact the employer directly for their privacy practices.

5.3 Legal & Regulatory Authorities

• HMRC: Tax and National Insurance reporting (legal obligation)
• Home Office: Right to Work compliance verification
• ICO: Data protection investigations if required
• Law enforcement: If required by court order or statutory duty
• The Pensions Regulator: Auto-enrolment compliance

Your data is primarily stored in UK/EU AWS regions. Some services involve transfers outside the UK:

SCCs = Standard Contractual Clauses approved by the UK ICO. Request copies at compliance@opusplatforms.co.uk

After retention periods expire, data is securely deleted or anonymized.

Automated Decision-Making

We do not use fully automated decision-making that produces legal effects. Our RAG compliance system uses deterministic rules, not AI profiling. You always have the right to human review of any compliance decision.

A Data Protection Impact Assessment (DPIA) is maintained for our AI processing activities in accordance with UK GDPR Article 35 and ICO guidance on AI and data protection.

Your right to human review: You may request human review of any decision in which AI was involved by contacting compliance@opusplatforms.co.uk.

AI-Assisted Actions: Where AI proposes high-impact actions (e.g., payroll adjustments, compliance overrides, account suspensions), these are always routed to a human operator for explicit approval before execution. See §4.5 for our tiered governance framework.

Right to Withdraw Consent

Where we process your data based on consent (e.g., biometric verification, analytics cookies, talent pool participation), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Withdraw via Account Settings or email compliance@opusplatforms.co.uk.

We use essential cookies for authentication and security. Analytics cookies require your consent. See our full Cookie Policy for details.

Manage preferences anytime in Account Settings → Privacy.

Our services are for individuals 18+ (UK minimum working age for most roles). We do not knowingly collect data from children. If discovered, it will be deleted immediately.

We may update this policy to reflect legal or service changes. For material changes:

• We update the version number and date
• We notify you via email for significant changes
• We request renewed consent if legally required

Continued use after changes constitutes acceptance. Check back periodically for updates.

We encourage you to contact us first so we can resolve your concern directly.