Privacy Notice

1. Who we are

High Desert Site Services, trading as High Desert Site Services, is the data controller for the personal data described in this notice. Contact us at privacy@highdesertss.com.

This page is maintained by High Desert Site Services to explain how the High Desert Site Services application handles personal data.

2. Personal data we collect and why

• Account data (name, email, company name, login credentials) — to create and secure your account and provide the Service. Legal basis: performance of a contract.
• Employee and job records you enter (employee names, positions, burdened hourly rates, hours worked, cost codes, notes) — to deliver job costing features to your company. Legal basis: performance of a contract; you are responsible for the personal data you enter about your employees.
• Expense and receipt data (vendor, amount, category, uploaded receipt images) — to track job costs. Legal basis: performance of a contract.
• Support messages — to answer your questions. Legal basis: legitimate interests.
• Usage and technical data (IP address, device and browser identifiers, log and error data) — for security, fraud prevention, troubleshooting and product improvement. Legal basis: legitimate interests.
• Billing identifiers (subscription and plan status) — to give you access to the plan you purchased. Legal basis: performance of a contract. Card details are collected and processed by Paddle, not by us.

3. Who we share data with

• Service providers / subprocessors — cloud hosting, database, file storage and error-monitoring providers that operate the application on our behalf.
• Merchant of Record — Paddle.com, which handles the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose data by law.

We do not sell personal data.

4. Company data isolation

Each company’s records are scoped to that company by database access rules. Data belonging to one contractor company is not made visible to another customer of the Service.

5. Retention

We keep account and job data for as long as your subscription is active and for a reasonable period afterwards so you can export it. Data is then deleted or anonymised when it is no longer needed, except where we must keep records to meet legal, tax or accounting obligations.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. You may also have the right to complain to your local data protection authority. To exercise these rights, email privacy@highdesertss.com; we aim to respond within one month.

7. International transfers

Our providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit, per-company access controls, role-based permissions and private storage for uploaded receipts. No system can be guaranteed to be completely secure.

9. Cookies

We use essential cookies and local storage to keep you signed in and to operate the application. Checkout pages served by Paddle may set their own cookies. You can clear or block cookies in your browser settings, but the application may not work correctly without the essential ones.

10. Changes

We may update this notice from time to time and will post the new version here with an updated date. See also our Terms & Conditions and Refund Policy.