ICO Registered Data Controller · EdenTouch CoLab Ltd

Privacy & Data

Last updated: 13 May 2026 · Effective: 13 May 2026

WorkGateIQ is a safety decision-support product within UxAi-ClarityForge®, operated by EdenTouch CoLab Ltd (Company No. 16472666), registered in England and Wales.

1. Who We Are

WorkGateIQ is a safety decision-support product within UxAi-ClarityForge®, operated by EdenTouch CoLab Ltd (Company No. 16472666), registered in England and Wales. EdenTouch CoLab Ltd is registered with the Information Commissioner's Office (ICO) as a Data Controller under UK GDPR. ICO Registration Number: ZC047648. For all data protection matters, contact: support@edentouchcolab.com

2. What Data We Collect
  • Account data: Name, email address, job title, organisation name — provided at registration
  • Safety gate data: Project names, task descriptions, work types, locations, PTW records, safeguard responses, responsible person names — entered by your team
  • Decision records: PASS, REFINE, or FAIL outcomes, timestamps, and the inputs that produced them — stored as immutable audit records
  • Usage data: Page views, feature interactions, and session data for product improvement
  • Communications data: Messages or enquiries you send to us directly

We do not collect sensitive personal data (health, biometric, financial) beyond what is explicitly entered by your organisation within a safety gate record.

3. Data Ownership
  • Organisations own all data they submit into WorkGateIQ
  • Data is used solely to operate WorkGateIQ and provide safety gate records
  • Data is not sold to any third party
  • Data is not shared with third parties except service providers required to operate the platform — each bound by data processing agreements
  • Export is available on request during the pilot
  • Users should avoid uploading unnecessary personal or sensitive data
3.1. Google Sign-In (OAuth)

WorkGateIQ allows users to sign in using Google OAuth. When you choose to sign in with Google, we may access the following Google user data:

Data Accessed

  • Your Google account email address
  • Your basic profile information (such as name and profile image)

We do not access

  • Gmail content
  • Google Drive files
  • Google Contacts
  • Calendar data
  • Any sensitive or restricted Google APIs

Data Usage

  • Authenticate you into the WorkGateIQ platform
  • Create or link your user account
  • Maintain secure login sessions

Google user data is never used for advertising, profiling, or training public AI models.

Data Sharing

  • Google user data is not sold or shared with third parties
  • It is only processed internally to provide authentication and account access

Data Storage & Protection

  • Authentication data is stored securely using encrypted systems
  • Access is restricted to authorised systems only
  • Industry-standard security controls are applied

Data Retention & Deletion

  • Google account data is retained only while your account is active
  • You may request deletion of your account and associated data at any time
  • Deletion requests can be made via: support@edentouchcolab.com

WorkGateIQ complies with the Google API Services User Data Policy, including the Limited Use requirements.

3.2. Microsoft Sign-In (Microsoft Entra ID / Microsoft OAuth)

WorkGateIQ also allows users to sign in using Microsoft authentication services (Microsoft OAuth / Microsoft Entra ID).

Data Accessed

  • Your Microsoft account email address
  • Basic profile information (such as name and profile image, where available)
  • A unique account identifier used for authentication

We do not access

  • Outlook or email content
  • Microsoft Teams messages
  • OneDrive files
  • Calendar data
  • Any Microsoft Graph data beyond basic identity

Data Usage

  • Authenticate you into the WorkGateIQ platform
  • Create or link your user account
  • Maintain secure login sessions

Microsoft user data is not used for advertising, profiling, or external analytics.

Data Sharing

  • Microsoft user data is not sold or shared with third parties
  • It is processed only for authentication and account management within the platform

Data Storage & Protection

  • Authentication identifiers are stored securely using encrypted systems
  • Access is limited to authorised services only
  • Industry-standard security controls are applied

Data Retention & Deletion

  • Microsoft account data is retained only while your account remains active
  • Users may request deletion of their account and associated data at any time
  • Deletion requests can be made via: support@edentouchcolab.com

WorkGateIQ follows Microsoft identity platform policies and applicable data protection regulations.

4. Data Storage & Retention

Your data is stored on secure cloud infrastructure within the United Kingdom and European Economic Area. Safety gate decision records are retained for a minimum of 7 years to support your organisation's compliance obligations under UK health and safety legislation. Account data is retained for the duration of your subscription plus 12 months. You may request export or deletion of non-audit data at any time.

5. AI Decision Engine — Transparency Statement
  • The engine applies deterministic, rule-based logic — it does not use a black-box AI model
  • Your inputs are never used to train external AI models
  • Human oversight is maintained at all times — a named, competent responsible person must review every gate
  • You control all data entered into the system and may request export or deletion at any time
  • We follow ICO guidance on the safe and fair use of AI and automated decision-making
6. Your Rights Under UK GDPR
  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data (subject to our retention obligations)
  • Restrict or object to certain processing
  • Request portability of your data in a structured, machine-readable format
  • Withdraw consent where consent is the legal basis for processing
  • Lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113

To exercise any right, contact: support@edentouchcolab.com. We will respond within 30 days.

7. Pilot Operations

WorkGateIQ is currently operating as a structured pilot with selected organisations. Features, data handling practices, and retention policies are subject to review as the product develops. We will notify registered users of material changes by email with a minimum of 14 days' notice.

Contact for data matters: support@edentouchcolab.com — Subject: DATA REQUEST
ICO: ico.org.uk · 0303 123 1113
Company: EdenTouch CoLab Ltd · Company No. 16472666 · ICO Reg: ZC047648