1. Parties and responsibilities
FAFAB INTEGRATED FACILITIES LTD (company number 17166678). Registered office: 2nd Floor Suite-8, Cranbrook House, 61 Cranbrook Road, Ilford, London, United Kingdom, IG1 4PG. FER Track is a product/service operated by FAFAB Integrated Facilities Ltd. Website: fertrack.app. Privacy enquiries may be submitted through FER Track’s published contact channels. Last updated: 3 November 2026. For customer workforce information, the customer/business acts as Controller and FAFAB Integrated Facilities Ltd / FER Track acts as Processor where applicable. FAFAB may separately act as Controller for its own account administration, security, billing and service management. The customer is the business using FER Track under its applicable service agreement.
2. Processing scope
Processing supports hosted workforce/workspace operation and storage and retrieval of account, invitation, attendance/location, schedule, assignment, evidence and reporting records. Data subjects may include administrators, workers and site/managers. Processing duration depends on the service relationship, customer instructions and applicable retention requirements.
3. Instructions and confidentiality
Where FAFAB acts as Processor, workforce data is processed on documented customer instructions in accordance with applicable law and the service agreement. Access is limited to authorised persons subject to appropriate confidentiality obligations. Instructions and any legally required processing are handled in accordance with applicable data protection requirements.
4. Security and assistance
FAFAB Integrated Facilities Ltd maintains appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No system can guarantee absolute security. Assistance with security incidents, rights requests and impact assessments is handled in accordance with applicable law, the relevant processing role and the service agreement. Incident communications and assistance depend on the circumstances and applicable requirements.
5. Providers and international transfers
FER Track uses Hostinger, Supabase and Titan Email infrastructure. Supabase production is in eu-west-2 — West Europe (London). The Hostinger server is in Massachusetts, USA, with backups in Boston, USA. Documents and data may be stored using Hostinger/Supabase infrastructure depending on the relevant part of the application. US hosting and backups may involve international transfers; applicable data protection requirements govern those transfers. Provider use and any customer authorisation are governed by applicable processing terms and data protection requirements. Available payment arrangements may include PayPal and GoCardless, depending on the applicable commercial arrangement. This does not mean automated payment processing is available in every service flow.
6. Return, deletion and accountability
On ending the service, return or deletion of customer data is handled in accordance with documented customer instructions, applicable service terms and legal obligations. Personal data is retained only for as long as necessary for the purposes for which it was collected, to operate the service, meet contractual requirements and comply with applicable legal obligations. Retention periods may vary by data type and customer requirements. Account deletion or deactivation may not automatically remove all operational, audit or legally required records. Infrastructure backups may be maintained by the relevant hosting/database providers; retention and recovery arrangements depend on the configured service plan and infrastructure settings. Information concerning processing and reasonable accountability enquiries may be requested through published contact channels. These processing terms are governed by the law of England and Wales.