Privacy Policy

Data Controller: Opus Platforms Limited (trading as "Opus")

Opus is a PAYE staffing agency that connects UK employers with qualified gig workers through our web platform and WhatsApp. This policy explains how we collect, use, and protect your personal data in compliance with UK GDPR and the Data Protection Act 2018.

2.1 Worker Registration

2.2 Identity Verification (Right to Work)

2.3 DBS Background Checks

2.4 Employment & Attendance

2.5 Financial Data

2.6 Employer Data

2.7 Automatically Collected

We process your data for these purposes:

4.1 What AI Can Do

• Workers (24 tools): Browse shifts, check earnings, view compliance status, manage availability
• Employers (31 tools): View shift fill rates, check worker compliance, approve timesheets
• All users: Get instant answers to platform questions 24/7

4.2 What AI Cannot Do

4.3 Data Processing

• Queries processed by: Third-party LLM providers (e.g., Anthropic Claude, OpenAI) under data processing agreements
• Data shared: Your query text, user role, relevant context (shift data, compliance status)
• Data NOT shared: Passwords, full bank details, biometric data
• Retention: AI queries logged for 90 days for audit/improvement

4.4 Your Controls

You can opt out of AI features by contacting support. Core platform functionality remains available without AI assistance.

5.1 Service Providers (Data Processors)

5.2 Employers (Joint Controllers)

When you accept a shift, we share with that employer:

• Your name, phone number, and email
• Compliance status (RTW verified, training completed)
• Attendance records (clock times, GPS coordinates if enabled)
• Performance ratings from previous shifts

Joint Controller: Both Opus and the employer are responsible for your data during assignments. Contact the employer directly for their privacy practices.

5.3 Legal & Regulatory Authorities

• HMRC: Tax and National Insurance reporting (legal obligation)
• Home Office: Right to Work compliance verification
• ICO: Data protection investigations if required
• Law enforcement: If required by court order or statutory duty
• The Pensions Regulator: Auto-enrolment compliance

Your data is primarily stored in UK/EU AWS regions. Some services involve transfers outside the UK:

SCCs = Standard Contractual Clauses approved by the UK ICO. Request copies at privacy@opusplatforms.co.uk

After retention periods expire, data is securely deleted or anonymized.

Automated Decision-Making

We do not use fully automated decision-making that produces legal effects. Our RAG compliance system uses deterministic rules, not AI profiling. You always have the right to human review of any compliance decision.

Right to Withdraw Consent

Where we process your data based on consent (e.g., biometric verification, analytics cookies, talent pool participation), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Withdraw via Account Settings or email privacy@opusplatforms.co.uk.

We use essential cookies for authentication and security. Analytics cookies require your consent. See our full Cookie Policy for details.

Manage preferences anytime in Account Settings → Privacy.

Our services are for individuals 18+ (UK minimum working age for most roles). We do not knowingly collect data from children. If discovered, it will be deleted immediately.

We may update this policy to reflect legal or service changes. For material changes:

• We update the version number and date
• We notify you via email for significant changes
• We request renewed consent if legally required

Continued use after changes constitutes acceptance. Check back periodically for updates.

We encourage you to contact us first so we can resolve your concern directly.