Privacy policy

Who we are

Control of Work Manager is a permit-to-work service run by DTI Consulting FZ LLC, Vuet2362, Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates.

The company you work for invited you and decides how its permit records are used: it is responsible for them (the controller). We run the service for that company and follow its instructions (the processor).

What we keep

• Your account: your name, your work email address, your language, your roles and sites, and your competences and authorisations with their expiry dates, as your company's HSE team enters them.
• What you record on permits: permits and their versions, approvals, your signatures (your name and the time), gas test readings, checklists, toolbox talks and acknowledgements, observations, isolations and locks, handovers, overrides, confined-space entries in and out, and the time of each.
• Photos and documents you add. They may show people or places. They are stored privately and open only through the app, for people who can see the permit.
• The audit trail: a record of every action, who took it and when, which nobody can change or delete. An invitation's record includes the invited person's name and email address.
• Notifications in the app, and alert emails if your company switches them on.
• For records made without signal: the time on your phone when you made them and when they were sent.

What we do not collect

No location tracking, no advertising, no analytics or tracking cookies, and we never sell data. The app uses only the cookies it needs to keep you signed in and to remember your language.

On your phone

So that field screens work without signal, your phone keeps a copy of the permits you work on and any records not yet sent. The copy is wiped when you sign out, and copies more than 7 days old are removed the next time the app is opened. Records not yet sent stay on the phone until they reach the server; they are never deleted. The camera is used only when you take a photo.

Why we use it

To run permits to work safely: to show each person the permits at their sites, to record who approved, did and checked each step, to send alerts, and to keep the safety record your company and the law require. We use it for nothing else.

Who can see it

People in your company see the permits at the sites they belong to; your company's HSE team sees every site. Other companies using the service never see your company's data.

Our service providers store and send it for us, and nothing else: Supabase (database, sign-in and file storage, in Mumbai, India), Vercel (the website: it runs in Mumbai, India, and its pages are delivered through Vercel's global network) and Resend (sign-in and alert emails, sent from Ireland, in the EU).

If your HSE links Control of Work to Supply Vessel Safety Manager, summaries of current permits for the chosen vessels, location text included, are shared with your company's managers there. No personal names are shared. HSE can revoke the link at any time.

How long we keep it

Permit records and their history are kept for the life of your company's contract plus 7 years, then deleted with the company's data.

When your account is deleted, your sign-in is blocked and your email address is replaced, but your name stays on the permit records and your email address may remain in the safety audit record of actions taken on your account (see Delete your account). Our providers keep their own logs of sign-ins and emails sent for their usual log periods.

Your rights

You can ask for a copy of what we keep about you, ask us to correct it, or ask us to delete your account. Ask your company's HSE team, or email info@dticonsultancy.com. We reply within 30 days. Some records cannot be deleted, because a permit to work is a safety record.

Keeping it safe

Every connection is encrypted. Each company's data is walled off from every other company's in the database. Files are private, and every action is recorded in the audit trail.

Children

The app is for people at work. It is not meant for anyone under 18.

Changes

When this policy changes, we update this page and the date at the top. This policy is governed by the laws of the United Arab Emirates (Ras Al Khaimah).

Contact

Questions about privacy: info@dticonsultancy.com, or write to DTI Consulting FZ LLC, Vuet2362, Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates.