DSJ ONESign in

Privacy Policy

Last updated 21 August 2026

1. Who we are

DSJ ONE is a workforce-management platform operated by DSJ Facilities Limited ("DSJ", "we", "us"), a company registered in England and Wales (company number 16303440). Registered office: Unit 1 Greenewable Park, Station Lane, Offord Cluny, St. Neots, England, PE19 5ZA.

Contact for this policy and for privacy questions about the DSJ ONE service: support@dsjone.com.

2. Scope

This policy explains how DSJ ONE handles personal information when you use the DSJ ONE website, web application and the DSJ ONE mobile app at https://app.dsjone.com.

It does not replace your employer's own privacy notice. Your employer (the customer organisation using DSJ ONE) decides what workforce information is entered, who may see it, and how long employment records are kept for their business. This policy is about the DSJ ONE service itself.

This is not a copy of the DSJ Facilities Limited cleaning-business website policy. It applies only to the DSJ ONE product.

3. The relationship between DSJ ONE and your employer

In most cases:

  • Your employer / customer organisation decides why workforce information is collected and how it is used for employment, scheduling, time, leave, documents, training, communications and payroll.
  • DSJ Facilities Limited provides the DSJ ONE software, hosts the service, and processes that information to operate, secure and support the platform.

We do not make employment decisions such as whether a shift is approved, whether leave is granted, or what you are paid. Those decisions belong to your employer.

The precise legal roles (controller / processor / joint controller) can depend on the customer contract and the specific processing. Nothing in this policy is a formal legal determination of those roles. Customers should rely on their agreement with DSJ Facilities Limited and their own legal advice.

4. Information DSJ ONE may process

The categories below reflect features that exist in DSJ ONE today. Not every organisation enables every module. We do not list planned features.

  • Account identity and contact information: name, work email, login identifiers, organisation membership and role.
  • Employment / workforce profile information: employee record details your employer stores (for example job title, employee number, start date, status, and similar profile fields they choose to keep).
  • Organisation, department, team and location/site information.
  • Work schedules and shifts.
  • Clock-in / clock-out and timesheet information, including exceptions a manager can see.
  • Location at the point of clock-in or clock-out, or when a user intentionally submits location through a form. See section 8.
  • Leave and holiday requests, balances and approvals where the employer uses leave.
  • HR documents and files uploaded by the employer or the employee.
  • Policies and acknowledgements (including that a policy was read or accepted).
  • Onboarding information and tasks where the employer uses onboarding.
  • Training and certification records where the employer uses training.
  • Tasks, forms and checklists, including submitted answers.
  • Form evidence that a user chooses to attach: optional photographs, files, signatures and location.
  • Announcements, acknowledgements, comments and reactions.
  • Direct and group chat content and attachments.
  • Supplies / order requests where the employer uses supplies.
  • Payroll, timesheet and pay-run information where the employer enables those modules, including payslip information where enabled.
  • Authentication and security information, including whether multi-factor authentication (TOTP) is enrolled. We do not publish authenticator secrets in this product or in this policy.
  • Audit, security and access logs reasonably required to operate and secure the service.
  • Technical and device information reasonably required to operate and secure the service (for example browser or app type, approximate device/network metadata generated by normal use, and diagnostic information if an error is reported).

We do not currently perform advertising, marketing profiling, or cross-app advertising tracking in DSJ ONE.

5. How information is obtained

  • Your employer creates your account and enters or imports workforce information.
  • You provide information when you sign in, update your profile, clock in or out, submit forms, upload documents, send messages, or use other features.
  • The service generates technical, security and audit records automatically when the platform is used.
  • If you email support@dsjone.com, we receive the content of that correspondence.

Accounts are created by the employer. There is no public self-service sign-up.

6. Purposes of processing

We process information to:

  • provide the DSJ ONE service to customer organisations and their authorised users;
  • authenticate users and protect accounts, including optional TOTP;
  • operate scheduling, time, leave, documents, training, tasks/forms, communications, supplies and payroll modules the customer enables;
  • verify clock-in/out against a site geofence when location is captured at that moment;
  • provide in-app notifications and inbox messages (not native push notifications — those are not currently implemented);
  • support customers and users who contact us;
  • maintain security, prevent abuse, investigate incidents and keep audit records;
  • meet legal obligations that apply to DSJ Facilities Limited as the platform provider.

7. Employer / customer responsibilities

Customer organisations are responsible for:

  • telling their workforce how they use DSJ ONE;
  • having an appropriate lawful basis and employment-privacy notices for their own use of workforce data;
  • deciding who is invited, which roles they have, and which modules are used;
  • the accuracy of employment, pay and HR records they enter;
  • handling day-to-day employment questions (shifts, leave, pay, company policy, manager decisions).

8. Location data

Location permission, where requested by the mobile app, is When-In-Use only.

Location may be requested:

  • when you clock in or clock out, including to check you are at the expected site (geofence validation);
  • when you choose to attach location as evidence on a form.

DSJ ONE does not currently perform continuous or background employee location tracking. Location is not collected while the app is unused in the background for tracking purposes.

If location cannot be read at clock-in/out, the clock event may still be recorded with an exception your manager can see.

9. Camera, photos, files and communications

Where a feature requires it, you may choose to capture or upload a photograph, document, signature or other file (for example form evidence, HR documents, chat attachments, training files). The app does not use the microphone.

Chat messages, announcements, comments, reactions and uploaded files are visible to the people your employer has permitted inside that organisation. Treat them as workplace communications.

10. Notifications

DSJ ONE currently provides in-app notifications and an inbox. Native push notifications (APNs / FCM) are not currently implemented.

11. Service providers

To operate DSJ ONE we use a small number of infrastructure providers. Material providers currently used:

  • Lovable, including Lovable Cloud, for application hosting and the managed cloud platform on which DSJ ONE runs (application, database, file storage and authentication infrastructure).
  • Lovable managed email for service emails such as invitations and password resets, sent from the DSJ ONE notify domain.
  • Google Fonts, which the public website loads to display typefaces.

We do not list every underlying hosting or transit provider we cannot independently verify. We do not disclose internal project identifiers, storage bucket names, or credentials.

Those providers process information only as needed to host, deliver, secure or send service communications. Additional customer-specific tools (for example a customer's own email system) are outside this list.

12. International transfers

DSJ ONE is offered to UK organisations. Infrastructure providers may store or process information in the UK, the EEA, the United States or other countries. Where a transfer outside the UK occurs, we rely on the provider's appropriate transfer safeguards (such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses) as applicable. Exact transfer locations should be confirmed in customer contracts and are flagged for legal review.

13. Security

We use organisational and technical measures appropriate to a multi-tenant workforce platform, including access controls, tenant isolation, encryption in transit, and audit logging. No method of transmission or storage is completely secure. We do not promise absolute security.

If we become aware of a personal-data breach affecting the platform, we will take steps required by applicable law and notify affected customers as required.

14. Retention

We have not published a single fixed retention schedule for every category. Information is retained according to:

  • the customer organisation's instructions and their own retention needs;
  • applicable law;
  • the customer contract; and
  • DSJ ONE's legitimate operational and security requirements (for example security logs).

When a customer relationship ends, or when a customer asks us to delete tenant data, we will follow the contract and applicable law. Formal retention schedules remain a governance item for the operator to adopt.

15. Your rights

Depending on applicable UK data-protection law, you may have rights to access, correct, delete, restrict or object to certain processing, and to data portability, and to complain to the Information Commissioner's Office (ico.org.uk).

How to exercise them:

  • For employment records, shifts, leave, pay, documents and other workforce information your employer controls, contact your employer first. They decide what is held for employment purposes.
  • For questions about the DSJ ONE service itself, your login, or this policy, email support@dsjone.com.
  • To request deletion of your DSJ ONE account when you cannot sign in, see Request account deletion.
  • We may need to redirect a request to your employer where they control the record, and we may need to verify your identity.

16. Children

DSJ ONE is a workplace platform for employer-invited adult staff. It is not directed at children and we do not knowingly offer accounts to anyone under 16. If you believe a child has been given an account, contact support@dsjone.com and your employer.

17. Changes

We may update this policy as the product or the law changes. The "Last updated" date at the top will change. Material changes will be published at https://app.dsjone.com/privacy.

18. Contact

DSJ Facilities Limited
DSJ ONE
Unit 1 Greenewable Park, Station Lane, Offord Cluny, St. Neots, England, PE19 5ZA
Email: support@dsjone.com