Privacy policy

3lanse (the website at https://3lanse.com and the 3lanse mobile app) is run by 3lanse. We are the controller of the personal data described in this policy.

Contact us about privacy at hello@3lanse.com.

We only collect what we need to run the service. Depending on how you use 3lanse, this includes:

• Account details: your name, email address and sign-in details. Passwords are handled by Google Firebase Authentication and we never see them. If you sign in with Apple or Google we receive your name and email from them.
• Profile details: your role, location, travel radius, day rate, work status, experience, accreditations, skills, sectors, photo and anything else you add. Companies add company name, contact name, logo and the roles they hire for.
• Compliance documents: insurance certificates, cards, identity and right-to-work documents and their expiry dates, if you upload them.
• CVs: if you upload a CV we read it to fill in your profile for you to check.
• Business and invoicing details: trading name, address, VAT and company numbers, bank details, clients and invoices you create, so they can be printed on your invoices.
• Messages and activity: messages, photos and files you send, connections, job posts, interest in jobs, interview requests, testimonials, recommendations and PQQ submissions.
• Payments: if you buy a paid plan, our payment provider (Stripe) handles your card. We see your plan, payment status and the last four digits only.
• Device and usage information: device type, app version, push notification token, IP address and logs of sign-ins and errors, used to keep the service secure and working.
• Safety reports: if you report or block someone, we keep the report and who it concerns.

We use your data for these purposes, relying on the lawful bases in UK GDPR and EU GDPR Article 6:

• To provide your account and the features you use, including your profile, search, messaging, jobs, interviews, documents, compliance checks and invoicing tools (performance of our contract with you).
• To show your profile to other signed-in members so they can find and contact you, which is the point of the service (contract).
• To check compliance and review PQQ submissions, including human review by 3lanse reviewers (contract, and our legitimate interest in keeping the network trustworthy).
• To keep 3lanse safe and secure, prevent fraud and misuse, act on reports and enforce our terms (legitimate interests).
• To send service emails and notifications such as confirmations, security alerts, messages and interview requests (contract).
• To send tips, product news and offers about 3lanse (see section 9).
• To improve the service using aggregated information (legitimate interests).
• To keep accounting and tax records and respond to lawful requests (legal obligation).

Where we rely on legitimate interests we have weighed them against your rights. You can object at any time (section 8).

Identity and right-to-work documents can show nationality. We use them only to support compliance checks you ask for, keep them private to you and our reviewers, and never use them to make decisions about you automatically.

Some features use artificial intelligence, for example reading your CV to fill in your profile. We send only the content needed to an AI provider (OpenAI) under terms that do not allow it to use your data to train its models.

AI suggestions are drafts for you to check. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. Compliance badges follow published rules, and PQQ decisions are made by people.

• Other members: your profile, photo, role, area, work status and badges are visible to signed-in members. Your email and phone are only shown if you switch them on. Messages are visible to the people in the conversation.
• Private to you: documents, clients, invoices, business and bank details, and CVs. 3lanse staff can access them only to support you, review compliance or investigate misuse.
• Service providers who process data for us under contract: Google (Firebase hosting, database, storage and authentication), Vercel (website hosting), Resend (email delivery), OpenAI (CV reading), Stripe (payments), Expo (app updates and push notifications) and Apple and Google (sign-in and app stores).
• Authorities, where the law requires it, or to protect someone's safety.
• A buyer of our business, if that ever happens, under the same protections.

We do not sell your personal data and we do not use it for third-party advertising.

Some of our providers store or process data outside the UK and European Economic Area, mainly in the United States. Where they do, we rely on adequacy regulations (including the UK–US data bridge and EU–US Data Privacy Framework where the provider is certified) or on the UK International Data Transfer Addendum and EU Standard Contractual Clauses, with additional safeguards where needed.

• Your account, profile and content: while your account is open. When you delete your account in the app or on the website, we delete your profile, documents, clients, invoices, messages you sent, connections and photo.
• Backups: deleted data can remain in encrypted backups for up to 35 days before being overwritten.
• Payment and subscription records: six years, to meet tax law.
• Safety reports and records of enforcement: up to two years after they are closed.
• Logs: up to 90 days.

Under UK and EU data protection law you have the right to:

• access a copy of your personal data
• have inaccurate data corrected (you can edit most of it yourself)
• have your data deleted
• restrict or object to how we use it, including for marketing at any time
• receive your data in a portable format
• withdraw consent where we rely on it, without affecting what we did before

Email hello@3lanse.com to use any of these rights. We will reply within one month. It is free unless a request is clearly unfounded or excessive.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) or, if you live in the EU, to your local data protection authority.

We send account emails (confirmations, receipts, security and activity such as interview requests) because they are part of the service.

We also send occasional tips, product news and offers about 3lanse to members. You can turn these off in Settings or with the unsubscribe link in any email, at any time. Where the law in your country requires your consent first, we ask for it.

Push notifications on your phone are only sent if you allow them. You can turn them off in the app or your phone's settings.

Data is encrypted in transit and at rest by our hosting providers. Access is controlled by security rules so members can only reach their own private data, and staff access is limited and logged. No system is perfectly secure; if a breach affects you we will tell you and the regulator as the law requires.

We use only essential storage in your browser or phone, for example to keep you signed in and remember sign-up progress. We do not use advertising or cross-site tracking cookies. If we add optional analytics we will ask first.

3lanse is for people aged 18 and over. We do not knowingly collect data from children.

We will update this policy when our practices change and show the date at the top. If a change is significant we will tell you in the app or by email.