Who we are
Safety Buddy is a digital safety-management platform for construction and project sites. This policy explains what information we handle when you use the platform, why, and the choices you have. Your company (the workspace owner) decides what worker and contractor data is entered — for that data we act as a processor on your behalf.
Information we collect
Account & workspace details (name, work email, role, company). Safety records you enter — projects, contractors, workers and machinery, including names, designations, nationality, safety-passport and certificate-of-fitness data. Documents you upload (IC/passport, certificates, inspection photos). Operational data such as manhours, inspections, findings, incidents and scores. Technical data (log-in activity, device and usage information) needed to run and secure the service.
How we use your information
To provide the platform: register and verify workers, contractors and machinery, issue Safety Passports, run inspections, calculate SPGPNC scores and BSPR rankings, and generate reports. To secure accounts, prevent misuse, and maintain an audit trail of who acted at each tier. To notify appointed users (Manager, Supervisor, Inspector) and contractors of actions relevant to them. We do not use your safety records to build advertising profiles.
Legal basis & consent
We process personal data to perform our service to you, to meet legal and safety-compliance obligations, and where you have given consent. Contractors submitting their workforce confirm a declaration when they register. You are responsible for ensuring you have a lawful basis to enter workers’ and contractors’ personal data into the platform.
Sharing & disclosure
We do not sell your data. We share it only with: the users and contractors within your own workspace as the platform requires; trusted infrastructure and email providers who process data strictly on our instructions; and authorities where required by law. Data stays scoped to your workspace and is never pooled across customers.
Data security
Access is tenant-scoped so one workspace can never see another’s data. Uploaded documents are held on private storage and streamed only to authorised users. We apply role-based access control, encrypted transport, and activity logging. No system is perfectly secure, but we work to protect your information as we would protect a site.
Data retention
We keep records for as long as your workspace is active and as needed for safety, audit and legal purposes. When a record or workspace is deleted, we remove or anonymise the associated personal data within a reasonable period, unless we are required to retain it.
Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. Workspace administrators can action most of these directly in the platform; for anything else, contact us using the details below.
Changes to this policy
We may update this policy as the platform evolves. Material changes will be reflected here with a new “last updated” date, and where appropriate we will notify workspace administrators.
Contact us
Questions about your data or this policy? Reach the person or team that administers your Safety Buddy workspace, or email privacy@safetybuddy.my.