Privacy Policy — TC Group Planning

Last updated: 24 September 2026

TC Group Planning is a private app for the staff planning of TC Group. It is meant for people who work for or with TC Group: employees in the Netherlands and self-employed crew at our stalls at the Manchester Christmas Markets. You can only sign in with an account that TC Group has created or approved. This policy explains what data we process, why, who can see it and what your rights are.

Who is responsible

TC Group (the Netherlands) is the controller for the data in this app.
Questions or requests? Email bramdreijer@outlook.com.

What data we process

Data	What it is used for
Name, email address, phone number	Your account, and contact about your rota
Address and postcode	Our records, and travel distance (Netherlands)
Date of birth	Checking the rules that apply to your age, such as working hours and pay
T-shirt size	Work clothing
Emergency contact (name and number)	Only used if something happens to you at work
Bank details (IBAN, account number, sort code) and, if you give it, your UTR number	Paying your invoice (Manchester) or your wages (Netherlands)
Hourly rate, notes and ratings by TC Group or a stall manager	Only visible to TC Group management, for pay and for planning who works where
Availability, time off and sign-ups for shifts	Making the rota
Hours worked, breaks, clock-in and clock-out times	Recording your hours, approving them and paying you
Incidents: not turning up, cancelling late, arriving late, and any deduction agreed in the house rules	Keeping the rota reliable
Which version of the house rules you agreed to, and when	Proof of the agreement between you and TC Group
Invoices made in the app	Your record and ours, for tax purposes
Notification token of your phone	Sending you push notifications about your rota
Location at the moment of clocking in and out — Netherlands only	Recording where a shift started and ended. Measured only at that moment, never tracked in the background. Not used in Manchester, see below.

The app does not collect data for advertising, does not profile you and does not track you across other apps or websites.

Manchester: clocking in with the tag at the stall

At the Manchester stalls you clock in and out by holding your phone against the sticker (NFC tag) in the stall, or by typing the daily code that hangs there. That shows you were at the stall, so we do not use your phone's location in Manchester.

What we record is which stall you clocked in at and when. The sticker only contains a serial number; the app stores a scrambled version of it, never the number itself. Your phone reads the sticker only while you are on the clock-in screen and press the button.

Who can see your data

You see your own details, rota, hours and invoices.
TC Group management sees the details of everyone who works for us.
Stall managers in Manchester see the rota of all stalls and, for the people working at their own stall, name, phone number and clock-in and clock-out times. They can correct a break or a forgotten clock-out and leave a rating or note. Every change is logged with their name and the time, and you can see the change on your hours. Stall managers do not see your pay, bank details or address.

Who may see what is enforced by the database itself, not just by the screens in the app.

Permissions: NFC, location, camera and notifications

The app only asks for a permission at the moment a feature needs it:

NFC — only when you press "Tap the tag" to clock in or out (Manchester).
Location — only when clocking in and out in the Netherlands, never in the background.
Camera and files — only if you add an attachment yourself.
Notifications — only to tell you that you are on the rota or that something in it changed.

If you refuse a permission, the rest of the app keeps working.

Where the data is kept

The data is kept in a secured database at Supabase, hosted in the European Union. Traffic between the app and the server is encrypted (HTTPS). For UK crew this means your data is stored in the EU; the UK government recognises the EU as offering adequate protection for personal data.

For push notifications a notification token goes to Apple (iOS) or Google (Android). They receive only the token and the text of the notification, nothing else.

How long we keep data

We keep your account details for as long as you work for or with TC Group. Hours, invoices and pay records are kept for as long as tax law requires (up to seven years) and are then deleted. When your account is closed, your login, availability, sign-ups, ratings and profile details are removed; only the records we must keep by law stay until the end of that period.

Having your account deleted

Want your account and your data deleted? Ask your manager, use "Delete my account" in the app, or email bramdreijer@outlook.com. We handle the request within 30 days. Data we are legally required to keep (such as hours and invoices) stays until the end of the retention period.

Your rights

You have the right to see your data, to have it corrected or deleted, to receive a copy of it, and to object to how we use it. Contact us at the email address above. If we cannot sort it out together, you can complain to the Information Commissioner's Office (ICO) in the UK or the Autoriteit Persoonsgegevens in the Netherlands.

If you are under 18, a parent or guardian may also contact us on your behalf.

Changes

If the app or the way we process data changes, we update this policy and put a new date at the top of the page.