Digital ID, attendance and communications — 9 November 2026

Additional information used for staff identity and attendance

For the staff digital ID, Bina uses the approved staff photograph, name, role, BPW number, ID issue and expiry dates, verification token and status. A limited verification page enables the host to check the worker presented for an assignment; it does not disclose the underlying recruitment, health, payroll or reference file. The signed-in staff account controls access to the worker's own digital card. Identity and current assignment checks must be completed separately from simply displaying the card.

Location at clocking actions

When the worker deliberately clocks in or out, the app requests fresh device coordinates and accuracy information and uses them with the time, account and booking to check the recorded service address and permitted boundary. Bina and authorised reviewers use relevant attendance evidence for accurate hours, safety, timesheet queries and necessary investigations. This is not conclusive proof of identity or all hours worked. Ordinary sign-in and reading documents do not require location, and this update does not authorise continuous tracking. Device permission is a technical permission; it is not blanket UK GDPR consent. If location is unavailable or inaccurate, use the named verification and correction route described in the attendance policy.

Voice notes and live call information

Bina Chat stores sent voice notes as audio attachments available to the conversation's authorised participants and to authorised reviewers under the established oversight or investigation controls. Current live voice calls are not recorded or transcribed as audio by Bina Chat. Call-event and connection information can include account and conversation identifiers, participants, ringing/connection/end times, outcome and duration where recorded, and signalling information needed to establish the connection. Live media may be relayed through the enabled calling provider, currently Cloudflare, where required. Use of suppliers and any international transfer must follow Bina's assessed safeguards; do not assume that a product label alone establishes a particular encryption or transfer guarantee.

Purpose limits and rights

Bina identifies and documents the lawful basis for each purpose, the necessity and balancing assessment where legitimate interests is used, any additional condition required for sensitive information, and the applicable retention category. Access is restricted to relevant employment, assignment, security, complaint or safeguarding purposes. A discrepancy must be reviewed with the worker and host; there is no automatic adverse decision based only on location failure. Necessary records and legal holds are retained under the documented schedule and reviewed when no longer needed; inability to delete a sent item in the app does not remove data-protection rights. Staff and clients are informed of material changes and can request clarification, correction, access or other applicable rights through admin@binapathways.co.uk. Acknowledgement of this notice is not agreement to unspecified future monitoring or to the recording of calls.

Chat records and the purposes of access

Bina records verified account identity, company and department details, conversation membership, messages and attachments, booking actions, delivery/read events, security events and investigation access records. These support work communication, staffing administration, service security, fair complaint handling and necessary safeguarding investigations. Client–staff, client–management and management–staff work conversations retain existing Bina management and department oversight. Access must be used for an authorised work purpose; a role or technical capability is not permission to browse out of curiosity. Staff-only conversations require the separate director-authorised control described above.

Lawful basis and proportionate investigation

Bina records the applicable lawful basis for each purpose. Routine staffing administration and proportionate security or complaint handling may rely on legitimate interests after a documented necessity and balancing assessment; legal obligation is used only where a specific duty applies. A client supply contract is not automatically a contract basis for processing a worker’s information. Before investigation access is enabled, the director must record the concern, why access is necessary, the selected conversation, investigators and duration, and consider a less intrusive route. Complete a DPIA where required and identify any Article 9 condition, Article 10 authority and associated UK-law requirements before processing the relevant sensitive information. Staff acknowledgement is not consent to surveillance and does not replace these assessments.

Limits on access and retained evidence

Investigation access exposes the selected conversation history and available attachments during the authorised period, including new messages while access remains active. The current control does not restrict access to selected dates within a conversation. The director must consider this scope before granting it. Switching access off ends further application access; it cannot withdraw a lawful copy or information already seen. Necessary retained evidence must be placed in the restricted case record, limited to the purpose and reviewed under the applicable retention schedule. No personal app, private device content or unrelated conversation is included. Do not use this control for covert monitoring.

Acknowledgement and optional choices

Staff acknowledge receipt and understanding of the current handbook and chat policy. Clients acknowledge the operational and privacy information, and an authorised company administrator separately accepts revised contractual terms where required. Nobody may accept or sign for another user. Earlier signed versions and receipts remain historical evidence. Optional marketing, device notification permission and any genuinely optional consent remain separate, may be declined without preventing ordinary account access, and can be changed through the relevant control. Essential service and policy notices are operational communications rather than marketing.

Retention and privacy rights

Chat participants cannot delete sent messages, attachments or conversations through the app. Own-message text editing ends two minutes after original sending; edits retain their audit history. This user-interface restriction does not remove data protection rights or authorise indefinite retention. Routine closed support conversations follow the published review schedule; operational chat and necessary investigation evidence follow their applicable justified category, with a specific legal hold where required. Contact admin@binapathways.co.uk for access, correction, objection, restriction, deletion or other applicable rights. Bina will assess the legal conditions and any necessary protection of another person’s information and explain any limitation. You may complain to the ICO.

Client work chat boundaries

Clients and eligible staff may communicate for staffing and assignment purposes. Bina management and departments retain oversight of client–staff and client–management work conversations for authorised operational, service, security and safeguarding purposes. Clients cannot see another company’s conversations or staff-only conversations. Staff-only investigation controls apply solely to staff-to-staff conversations and do not switch off oversight of client work conversations. Bina must use access proportionately and follow the privacy notice, confidentiality obligations and applicable law.