Skip to main content
CheckSync logo

Legal

Privacy Policy

Last updated: 28 May 2026

Who we are. CheckSync is a product by Ultrafast Digital ("we", "us", "our"). This page explains, at a high level, how this marketing site and demo materials handle personal data. Customer production deployments are governed by a signed Data Processing Addendum (DPA) and project-specific documentation. Ultrafast Digital is the data processor in production deployments - the customer organisation is the data controller.

What data the platform can process

In production deployments configured per customer, CheckSync may process the following categories of personal data, depending on how each site is configured:

  • Visitor, staff, contractor and agency worker identifiers - name, company, role
  • Contact details - email address and phone number where collected
  • Visit metadata - check-in and check-out timestamps, site, terminal, host and purpose
  • Mathematical biometric embeddings - derived from facial geometry for agency worker verification; no face photograph is stored
  • Consent and acknowledgement flags recorded per check-in event
  • Audit log entries - sign-in, sign-out, erasure and administrative events

Not all data types are used by every deployment. Data processed is determined entirely by the customer's configuration and their role as data controller.

This marketing site and demo environment

  • No e-commerce, user accounts or purchasing is available on this site.
  • The contact form collects name, email, company, role and message for the purpose of responding to your enquiry. This data is sent to info@ultrafastdigital.com and is not shared with third parties.
  • Dashboard access in customer environments uses Auth0 for authentication. Auth0 may set cookies required for session management.
  • We do not run advertising trackers on this site. If privacy-friendly analytics are enabled in the future, this page will be updated.
  • The client login gateway (/access) processes your organisation slug and access code to resolve your dashboard URL. No personal data is stored by this process.

Legal bases (GDPR)

The lawful basis for processing in production deployments is determined by the customer as data controller. Typical bases include:

  • Legitimate interests - for site access control, safety and operational accountability
  • Consent - for optional data such as photographs or specific acknowledgements where collected
  • Legal obligation - where retention is required by applicable law or contractual obligation

Biometric data is special category data under GDPR Article 9. Where biometric verification is configured, explicit consent from the data subject is required before enrollment.

Retention

Retention periods are configurable per deployment to match the customer's data retention policy. Records are not retained indefinitely by default. Biometric verification records are held in a separate audit log with independent retention controls, distinct from standard attendance records.

Demo environment data, if any, is ephemeral and not treated as production personal data.

Security measures

  • Authentication via Auth0 with role-based permissions on the dashboard
  • Transport encryption (HTTPS/TLS) on all connections
  • Encryption at rest in managed cloud services
  • Terminal device separation from corporate LAN via 4G/5G SIM or guest Wi-Fi
  • Append-only audit logging - records cannot be modified or deleted outside of authorised erasure workflows
  • Per-client isolated deployment - no shared database between customers

Controller and processor roles

In customer deployments, the customer organisation is the data controller, determining the purposes and means of processing. Ultrafast Digital acts as the data processor, processing personal data only on documented controller instructions under a signed Data Processing Addendum.

For enquiries submitted through this marketing site (checksync.ultrafastdigital.com), Ultrafast Digital acts as the data controller.

Your rights

Under GDPR, data subjects have rights including access, rectification, erasure, restriction, portability and objection.

  • For data processed in a production deployment, please contact the customer organisation (the data controller) to exercise your rights. We will assist the controller in responding.
  • For data submitted through this marketing site, contact us directly at info@ultrafastdigital.com.
  • You also have the right to lodge a complaint with your national supervisory authority (e.g. the ICO in the UK).

Cookies

We do not use non-essential cookies on this website. No advertising or behavioural tracking cookies are set. Strictly necessary security cookies may be set by our hosting and CDN provider (Cloudflare) to protect the site from automated abuse. These are essential for operation of the service and do not require consent.

If we add analytics in the future, we will use a privacy-friendly, cookieless solution or update this page and request consent where required.

Contact

For privacy-related questions or to exercise your rights in relation to data submitted through this site:

Email: info@ultrafastdigital.com

Phone: +44 1226 972759

GDPR compliance Data Processing Addendum Security Back to home

This page is for information only and does not constitute legal advice. For formal data protection queries, please contact a qualified data protection professional.