Last updated August 2026
Who is responsible
Each workspace (tenant) is controlled by the organisation that created it. That organisation decides what worker records and evidence are entered. PlazaWorkforce processes that data on their instruction in order to operate the service.
What we process
- Account data: name, email address and workspace membership for people who sign in.
- Worker records: identity, contact details, engagement type, roles, skills and organisation.
- Compliance data: credentials, issue and expiry dates, verification status and any uploaded documents.
- Operational data: projects, shifts, assignments, timesheets, incidents and related evidence.
Why we process it
To determine who is available and competent for planned work, to schedule and evidence that work, and to support approval of hours and cost. Workspace owners are responsible for establishing their own lawful basis for processing worker data.
Separation and access
Data is scoped to a single workspace and access is enforced at the database layer by row-level security policies, so records from one workspace are not readable from another. Within a workspace, access follows the roles assigned to each member.
Retention and deletion
Records persist until the workspace owner deletes them. Demo workspaces created from the review flow are disposable and contain synthetic data only. To request deletion of a workspace and its records, contact us via the contact page.
Your rights
Individuals whose data is held in a workspace should direct access, correction or erasure requests to the organisation that operates that workspace. We support workspace owners in responding to those requests.