Privacy and Cookie Policy

Effective Date: 01 February 2026
Last Updated: 18 August 2026
Website: https://diisco.app

1. Introduction

Diisco Ltd (“Diisco”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy and Cookie Policy explains how we collect, use, store, and protect your personal data when you visit our website, use the Diisco mobile application, or submit your details through our forms.

This policy applies to the Diisco website and mobile application.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation.

2. Who We Are

Diisco Ltd is the data controller of personal information collected through our website and mobile application.

If you have any questions about this policy or your personal data, please contact:

Email: info@Diisco.app

3. Information We Collect

Information You Provide

When you register for or use Diisco, we may collect:

  • Your name
  • Your email address
  • Your phone number
  • Your profile information
  • Your CV and employment experience
  • Your profile photo
  • Right-to-work information and supporting documents
  • Shift applications and bookings
  • Ratings and reviews
  • Messages and communications made through the Platform
  • Any other information you voluntarily submit

For venues, we may also collect business and venue information, including venue details, shift information and payment-related information required to use the Platform.

Location and GPS Information

The Diisco mobile application uses device location services, including GPS, to provide location-based features relating to confirmed shifts.

Depending on the feature being used and the permissions granted on your device, Diisco may collect precise and approximate location information.

Location information is used for the following purposes:

  • Detecting when a Worker enters the location radius of a Venue for a confirmed Shift
  • Sending a notification reminding a Worker to check in when they arrive near the Venue
  • Enabling and verifying Shift check-in
  • Enabling and verifying Shift check-out
  • Confirming that a Worker is at or near the Venue associated with a confirmed Shift
  • Recording the date, time and relevant location associated with a check-in or check-out
  • Helping Venues confirm Worker attendance
  • Maintaining accurate Shift and attendance records
  • Preventing and detecting fraudulent, inaccurate or unauthorised use of the Platform
  • Improving the security, reliability and functionality of the Platform

Background Location

Where a Worker has enabled the relevant location permissions, Diisco may access location information in the background, including when the mobile application is closed or not actively being used.

Background location is used specifically to detect when a Worker enters the designated location radius of a Venue for a confirmed Shift. This allows Diisco to send the Worker a timely notification reminding them to check in.

Background location is not used to continuously track a Worker’s movements throughout their shift.

Diisco does not periodically monitor a Worker’s location throughout the duration of a Shift for general tracking purposes.

Background location is used to support the shift arrival reminder functionality and is not used to monitor Workers when they do not have a confirmed Shift requiring this functionality.

Check-In and Check-Out Location

When a Worker actively uses the Check In or Check Out functionality, Diisco may use the device’s location to verify that the Worker is at or near the relevant Venue.

The relevant location, together with the date and time of the action, may be recorded as part of the Worker’s attendance and Shift records.

Location Permissions

The Diisco mobile application requires appropriate device permissions to provide its location-based features.

Workers may manage location permissions through their device settings. If location permissions are disabled or restricted, certain features, including arrival reminders and location-based check-in or check-out, may not function correctly.

Where required by applicable law, Diisco will obtain the appropriate consent before collecting and processing location information.

Information Collected Automatically

When you use our website or mobile application, we may collect:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • App version
  • Pages or screens visited
  • Date and time of access
  • Referral source
  • Technical and diagnostic information
  • Information about how you interact with the Platform

This information may be collected through cookies, analytics technologies, app technologies and similar tools.

4. How We Use Your Information

We use your personal data to:

  • Create and manage your Diisco account
  • Provide and operate the Diisco Platform
  • Connect Venues and Workers
  • Process shift applications and bookings
  • Detect Worker arrival at confirmed Shift locations
  • Send shift arrival and check-in reminders
  • Enable and verify Shift check-in and check-out
  • Record and maintain attendance information
  • Verify or support the integrity of user profiles
  • Facilitate communication between users
  • Display ratings, reviews and relevant profile information
  • Provide customer support
  • Send service-related notifications and communications
  • Improve the Platform, features and user experience
  • Monitor Platform usage, security and performance
  • Prevent fraud, misuse and abuse
  • Comply with legal and regulatory obligations
  • Protect the rights, safety and security of Diisco and its users

We do not sell or rent your personal data to third parties.

5. Legal Basis for Processing

We rely on the following lawful bases under the UK GDPR, depending on the purpose for which personal data is processed:

Consent

Where you have provided consent, including where consent is required for specific location-based functionality, cookies or marketing communications.

Location permissions are also controlled through your device’s operating system and may be required to enable certain Diisco features.

Contract

Where processing is necessary to provide the Diisco Platform, provide requested features, or perform our contractual obligations to you.

This may include processing information necessary to facilitate confirmed shifts, attendance records, check-in and check-out functionality and communications between Workers and Venues.

Legitimate Interests

Where processing is necessary for our legitimate business interests, such as maintaining Platform security, preventing fraud, improving our services, verifying attendance and operating the Platform, provided those interests are not overridden by your rights and freedoms.

Legal Obligation

Where we are required to process personal data to comply with a legal or regulatory obligation.

We will identify and apply the appropriate lawful basis for each processing activity. Where we rely on consent, you may withdraw your consent at any time where applicable. Withdrawing location permission may mean that certain Diisco features cannot operate.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss or destruction.

Access to personal data is restricted to authorised individuals and service providers who require access for legitimate business purposes.

However, no electronic system or method of transmission is completely secure, and we cannot guarantee the absolute security of data transmitted through or stored on the Platform.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, provide our services, resolve disputes, maintain appropriate business records, prevent fraud, or comply with legal obligations.

Location and attendance data will be retained only for as long as reasonably necessary for the purposes for which it was collected, including:

  • Maintaining Shift and attendance records
  • Verifying check-in and check-out
  • Resolving attendance or Shift disputes
  • Preventing and investigating fraudulent activity
  • Complying with legal or regulatory requirements

Background location data used to trigger an arrival notification will not be retained for continuous movement tracking.

You may request deletion of your personal data at any time, subject to any legal or legitimate reasons we may have for retaining certain information.

8. Sharing Your Data

We may share personal data with trusted third-party service providers who support our website, mobile application and business operations, such as:

  • Website and application hosting providers
  • Cloud storage providers
  • Email and communications providers
  • Push notification providers
  • Analytics providers
  • Technology and software service providers
  • Location and mapping service providers
  • Identity or verification service providers
  • Payment and accounting service providers
  • Security and fraud prevention providers

We may also share relevant information between Workers and Venues where necessary to facilitate the use of the Diisco Platform, including information relating to bookings, applications, profiles, ratings, reviews and attendance.

Location information may be processed to verify attendance and check-in or check-out where this functionality is used.

Precise location information is not displayed to other Workers or Venues as a general profile or tracking feature. Location information may be used internally and through relevant technology providers where necessary to provide the location-based features described in this policy.

We do not provide other users with continuous access to a Worker’s location.

These providers are required to process personal data securely and in accordance with applicable data protection laws.

Where third-party service providers process personal data on our behalf, we require appropriate contractual and security arrangements where applicable.

We do not transfer personal data outside the UK unless appropriate safeguards are in place and the transfer is permitted under applicable data protection legislation.

9. Your Rights

Under UK data protection law, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete data
  • Request erasure of your data
  • Object to or restrict certain processing
  • Request data portability
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us at info@Diisco.app or use the contact form at:

https://Diisco.app/contact-us/

Cookie Policy

10. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites function effectively and provide information about usage.

Similar technologies may also be used within the Diisco mobile application for functionality, analytics, security and performance purposes.

11. Types of Cookies and Similar Technologies We Use

Strictly Necessary Technologies

These technologies are essential for website and Platform functionality, security, authentication and other services requested by users.

Analytics Technologies

We may use analytics tools, such as Google Analytics, to collect information about website and Platform usage. This helps us understand how users interact with Diisco and improve performance and user experience.

Where required by law, we will request consent before using non-essential analytics cookies or similar technologies.

Location Services

Location services are separate from website cookies and are used by the Diisco mobile application to provide location-based functionality.

The Diisco mobile application may use device location services, including GPS, to:

  • Detect when a Worker enters the location radius of a confirmed Shift
  • Trigger a shift arrival reminder
  • Enable location-based check-in
  • Enable location-based check-out
  • Verify Worker attendance at a Venue

Location services may operate in the background where the Worker has enabled the relevant device permissions. This is necessary for Diisco to detect arrival at the location of a confirmed Shift and send the appropriate check-in reminder.

Diisco does not continuously track Workers throughout their shifts.

Location services are controlled through your mobile device permissions. Disabling location permissions may prevent arrival reminders, check-in or check-out functionality from operating correctly.

12. Managing Cookies and Permissions

You can control or disable cookies through your browser settings.

You can also manage location permissions through your mobile device settings.

Please note that disabling certain cookies, technologies or location permissions may affect the functionality of the website or mobile application.

If background location permission is disabled, Diisco may not be able to detect when you enter the location radius of a confirmed Shift and therefore may not be able to send an automatic arrival reminder.

You can still manage available location permissions through your device settings, subject to the functionality supported by your device and operating system.

13. Changes to This Policy

We may update this Privacy and Cookie Policy from time to time to reflect changes to our services, technology, legal requirements or data processing practices.

Updates will be posted on this page with a revised effective date.

Last Updated: 18 August 2026