Privacy

Highways Desk (Peter Holt, sole trader) is the controller for the personal data on this desk. Questions go to info@highwaysdesk.com.

The desk holds what an agency needs to book a shift, keep a timesheet, raise an invoice and run payroll. That can include:

• name, date of birth, address, phone and email
• right to work and qualifications, and the dates they run out
• National Insurance number, UTR and bank details, where they are needed to pay someone
• timesheets, hours, pay and deductions
• site photos, and the place and time of a job on the diary

The lawful bases are contract (booking and paying the work), legal obligation (tax and payroll records) and legitimate interests (running the desk, keeping a record of who was on site, and dealing with a query). The desk is not used to advertise, and the data is not sold.

Who can see it:

• the agency that holds the worker, on its own sign-in
• the owner login and the company login, which can open every agency
• an umbrella, when a timesheet is sent for payroll: the hours, the gross and the deductions, not the client’s rate
• a client, only the hours sheet and the site photos the agency chooses to send. A client does not see bank details, a National Insurance number, a UTR or deductions

An agency sign-in cannot open another agency’s workers, timesheet, customers, rate card, messages or export.

Timesheets and pay records stay while the agency is a customer, and then for as long as tax and payroll law asks, which can be several years. Site photos are kept for about 3 months unless a longer keep is needed for a dispute. A downloaded copy of a company book can contain bank details and National Insurance numbers. Do not email that file.

The desk is hosted so the pages can be opened. If a supplier stores a copy outside the United Kingdom, that supplier has to protect it to a UK standard. Ask the address above if you want the names of those suppliers.

You can ask to see your record, correct it, erase it, restrict it, or object to a use that is not required by law. You can also complain to the Information Commissioner’s Office. Email the address above, or ask your agency. We will answer a request within one month.

Signing in uses one essential session cookie. There are no analytics cookies and no advertising cookies. Read the cookie policy.

This page was written on 25 October 2026.