Last updated: 24 June 2026
This policy explains what data SiteHub collects when you use our app and website, why we collect it, who we share it with, and the rights you have over it. SiteHub is built for UK construction firms and their teams, and this policy covers both the mobile app and the web app.
SiteHub is a site management app for UK construction contractors. For the purposes of UK GDPR, the construction firm that creates a SiteHub account is the data controller for the records they create (site diaries, safety reports, worker data, etc.), and SiteHub acts as the data processor that stores and processes that data on their behalf. For data relating directly to this website and our own communications with you, SiteHub is the data controller.
When a firm signs up and uses SiteHub, we collect:
We use the data above to operate the app: storing and syncing your site records, generating PDF reports, sending the notifications and emails you or your firm admin have opted into, and enforcing the access permissions your firm sets (e.g. which sites a worker can see). We do not use your data for advertising, and we do not sell it to third parties.
SiteHub is built on Google Firebase, and the following processors handle data on our behalf:
Authentication, database storage (Firestore), hosting, and the backend functions that power the app. This is where the bulk of your account and site data is stored.
Photos and voice notes you attach to records are stored with Cloudinary, our media hosting provider.
If your firm subscribes to a paid plan, Stripe processes the payment directly — we never see or store your card details.
Only if your firm admin actively connects their Xero account, certain cost records (e.g. purchase orders) can be pushed to your firm's own Xero account. This is optional and entirely controlled by your firm.
All of these providers are bound by data processing agreements and GDPR-compliant safeguards. We do not share your data with any other third party for their own marketing purposes.
We keep your data for as long as your firm's account remains active, so your records stay available to you. If you'd like your personal account and associated data deleted, see our account deletion page — we permanently delete account data within 30 days of a verified request.
Data is encrypted in transit (HTTPS/TLS) and access is controlled through Firebase security rules, which restrict each user to the firm, sites, and records they're authorised to see based on their role.
Under UK GDPR, you have the right to access, correct, or erase your personal data; to restrict or object to processing; and to data portability. To exercise any of these rights, email us at james@sitehubapp.co.uk. You also have the right to lodge a complaint with the ICO at ico.org.uk.
SiteHub is a business tool for construction firms and is not intended for use by anyone under 18.
We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify firm admins directly.
If you have any questions about this policy or how your data is handled, email us at james@sitehubapp.co.uk.