Legal
Privacy Policy.
Version 2026-10-25 · in effect from 25 October 2026
This policy explains what we do with information about you. It covers everybody who uses ALLDAY: people looking for work, people applying to the Cover Shift Crew, venues hiring through us, and anybody who simply reads the board.
Read the section that describes you. The sections on security, your rights, how long we keep things and who we share with apply to everyone.
Who we are
ALLDAY is a trading name of FAIR TIP LTD, a company registered in Scotland, company number SC892153.
That company is the data controller for the information described here, and is registered with the Information Commissioner’s Office under ZC172600. Everywhere else on this site, and everywhere you deal with us, we are ALLDAY.
For anything about this policy or about your information, write to privacy@weareallday.co.uk.
Everybody: using the site
You can read the jobs board without an account and without telling us who you are. To apply for anything, or to post anything, you need an account.
An account means we hold your email address and, if you set one, a password. We never see the password itself, only a value derived from it that cannot be turned back into your password.
We set cookies to keep you signed in. They are the only cookies we set, and there is nothing optional to agree to or refuse. The Cookie Notice lists them.
We use privacy-friendly analytics to count page views and measure how fast pages load. It does not set cookies, does not follow you to other websites, and does not build a profile of you.
If you are looking for work
What we hold, and why:
| What | Why | Our lawful basis |
|---|---|---|
| Your name, phone number and the area you are in | So a venue you apply to can tell who you are and get in touch | Taking steps at your request before a contract |
| The roles you work, your experience, any certificates you list, a LinkedIn address if you give one | So your application says something useful about you | Taking steps at your request before a contract |
| Your CV, if you upload one | So a venue can read it when you apply | Taking steps at your request before a contract |
| The jobs you save and the jobs you apply to | To show you your own list, and to tell the venue you applied | Taking steps at your request before a contract |
What the venue sees. When you apply to a post, the venue that posted it sees your name, your contact details, what you have put on your profile and your CV if you have uploaded one. They see this because you applied: that is the point of applying. They do not see anything about other jobs you have applied to or saved.
Venues are separate data controllers for what they do with your application after that. We set expectations in our terms, but once they have your details, how they handle them is their responsibility and they have their own obligations to you.
If you have applied to the Cover Shift Crew
This is the most information we ask anybody for, because we may end up paying you and placing you in someone else’s venue. We ask for it in stages and only when we need it.
| What | Why | Our lawful basis |
|---|---|---|
| Your legal name and date of birth | To know who you are, and to check you are old enough for the work | Taking steps at your request before a contract; legal obligation |
| Your home address and postcode | To work out which shifts are near you, and for employment records | Taking steps at your request before a contract |
| Your phone number | To reach you about a shift. We do not give it to venues | Taking steps at your request before a contract |
| An emergency contact’s name and number | In case something happens to you at work | Our legitimate interest in your safety, and yours |
| Your right to work: a share code, or a document such as a passport, and the date we checked it | Because we are required to check you may work in the UK | Legal obligation |
| Certificates you upload, such as Food Safety or a Personal Licence | So we can tell a venue what you hold | Taking steps at your request before a contract |
| Your experience, the sections you work, your availability, whether you drive, and anything you write about yourself | To match you to shifts you would actually want | Taking steps at your request before a contract |
| Notes our staff make while reviewing your application, and who reviewed it | So a decision about you can be explained and revisited | Our legitimate interest in running a fair process |
| Once your first shift is booked: your title, your National Insurance number, which HMRC starter statement is true for you, and your student loan plan | To pay you through PAYE and report it to HMRC | A legal obligation |
We never ask for your bank details. You set up your payout account with Stripe yourself, inside the app, and Stripe holds those details. We never see them.
Your National Insurance number is asked for once, when your first shift is booked, along with your title, your HMRC starter statement and your student loan plan. We do not ask before then, because until there is a shift there is nothing to pay and no reason to hold it. It goes, with your name, address, date of birth, hours and pay, to Moonworkers, the payroll service that works out your PAYE, produces your payslip and reports your pay to HMRC for us.
A passport or an identity document. If you upload one, the image may reveal your nationality. We keep it only as long as we need it for the right to work check and the record we are required to hold, and we do not use it for anything else.
What a venue sees about you. When you apply for a shift, the venue that posted it sees your name, the roles we have approved you for, your experience, a summary of the certificates you hold and your CV. They see it because you applied for their shift, and no venue can browse the crew or look you up. Once you are booked they also know the role you are covering.
They are not given your right-to-work documents, your date of birth, your address or your phone number. A CV usually carries contact details of its own: if you would rather a venue did not have yours, upload a copy with them taken off, and it will be the copy they get. Either way, anything that needs sorting out about a shift goes through us.
Venues are told to use what they see only to decide on that shift, to keep it no longer than they need it and not to pass it on. Once they have it they are responsible for it in their own right, with their own obligations to you.
Decisions about your application. Approving somebody for a role is a decision made by a person, not by software. Nothing here is automated decision-making of the kind that produces legal effects about you.
If you are hiring
| What | Why | Our lawful basis |
|---|---|---|
| Your name, email and phone number | To run your account and to reach you about it | Performing our contract with you |
| Your venue’s name, town, neighbourhood and anything you write about it | To show it on the board. Most of this is published on purpose | Performing our contract with you |
| Your subscription status and the reference our payment provider gives us | To know whether your account is live | Performing our contract with you; legal obligation for our records |
We never see your card number. Payments are taken by Stripe, who hold the card details and tell us only whether the payment worked.
Email and the phone line
We email you about the things you do here: an application you sent, a booking, a receipt, a password reset. That is the service working rather than marketing, so it carries on for as long as you have an account.
If you are in the Cover Shift Crew we also email you when a shift you are approved for goes live. That one is yours to switch off, in the crew area, and switch back on whenever you want it.
We do not send marketing email.
Our support line records a voicemail if you call out of hours, sends it to us by email and keeps it until the matter is dealt with. If you would rather not leave a recording, email cover@weareallday.co.uk instead.
Who else handles your information
We keep this list short on purpose. Each of these does one job for us, under contract, and may not use your information for anything of their own.
- Supabase — the database, sign-in, and storage for files you upload such as a CV or a certificate.
- Vercel — hosting the site, counting page views and measuring page speed, all without cookies.
- Stripe — taking payments from venues, and paying the crew. A crew member’s payout account and bank details are held by Stripe, not by us.
- Moonworkers — our payroll service. What each crew member worked and earned, and what HMRC needs to identify them, so that PAYE can be run, payslips produced and the pay reported.
- Resend — sending the email the site sends.
- Twilio — the support phone number, its voicemail and its text messages.
- Cloudflare — our domain, and routing email sent to our addresses.
Some of these are based outside the UK. Where information leaves the UK we rely on the protections the law provides for that, such as the UK’s adequacy decisions or the International Data Transfer Addendum.
We do not sell your information. We do not share it for anybody else’s advertising. We will hand it over if the law requires it, and we would tell you if we were allowed to.
How long we keep things
- Your account — while it exists, and for a short period after you close it so that the closure itself can be evidenced.
- Applications you make — twelve months after the post closes, so you and the venue can both see what happened.
- A CV you upload — until you replace or delete it, or close your account.
- Crew right to work records — for the period the Home Office requires, which is the duration of the work plus two years.
- Payment and payroll records — six full tax years, because HMRC requires it.
- Support recordings and messages — until the matter is closed, then up to six months.
Keeping it safe
Access is limited by the database itself rather than by convention: rules in the database decide which rows each account may read, so a mistake in the website cannot hand somebody a record they were never entitled to. Files you upload are stored privately and reached only through short-lived links. Only staff who need to review crew applications can open them, and we record who looked at what.
Your rights
You can ask us to:
- give you a copy of what we hold about you;
- correct anything that is wrong;
- delete what we no longer need to keep;
- stop or limit what we are doing with it;
- hand it to you, or to somebody else, in a portable form;
- object to something we are doing on the basis of our own legitimate interests.
Write to privacy@weareallday.co.uk and we will answer within one month. There is nothing to pay.
If we get it wrong, you can complain to the Information Commissioner’s Office at ico.org.uk, or call them on 0303 123 1113. We would rather you came to us first so we can fix it.
Children
ALLDAY is not for under-18s. We do not knowingly hold information about anybody younger, and we will delete it if we find we have.
Changes to this policy
When we change something that matters, we publish a new version with a new date and ask you to read it the next time you sign in. Small corrections are made in place. This is version 2026-10-25.