1. Who we are and our roles
Hirentra is a product of TheBigBangWorks Ltd (company no. 17424469), registered in England and Wales. Contact: hello@hirentra.com.
For website enquiries, account administration, billing and our own security records, TheBigBangWorks Ltd may act as controller. For project, workforce, supplier and operational data entered into a customer's workspace, the customer will normally be controller and TheBigBangWorks Ltd will act as processor under the customer agreement and Data Processing Agreement.
2. Information we may handle
- Contact and account information such as name, work email, organisation, role and authentication identifiers.
- Project and operational records, including suppliers, sites, assets, purchase orders, PODs, invoices, workflows and audit history.
- Evidence uploaded by authorised users, including site photographs and document images.
- Location and timestamps where a configured workflow captures them.
- Technical, security and audit information including browser/device information, IP address, access events and application logs.
- Subscription and billing records. Payment-card data is handled by the relevant payment provider rather than intentionally stored in Hirentra application tables.
- Enquiry, onboarding and support correspondence.
3. Why we use it
We process personal information to provide and secure Hirentra, administer customer accounts and subscriptions, support users, maintain audit evidence, prevent misuse, meet legal obligations, respond to enquiries and improve reliability. Depending on the activity, the lawful basis may include contract, pre-contract steps, legal obligation, legitimate interests, or consent where consent is appropriate.
4. Hosting, authentication and storage
Hirentra currently uses Supabase for core hosted database, authentication and storage services. We do not hide that infrastructure dependency in our legal documentation. The processing region and any customer-specific residency requirements are confirmed during onboarding or in the applicable order form/DPA schedule rather than guessed on this public page.
Hirentra also uses specialist providers for web delivery/security, transactional email and subscription billing. The current categories and named providers are maintained on our Subprocessors page.
5. International transfers
Some providers may process or support information outside the UK. Where UK data-protection law requires transfer safeguards, we use an applicable adequacy regulation, recognised contractual safeguards or another lawful mechanism. Customer-specific hosting and transfer requirements can be recorded in the DPA/order form.
6. Photographs, evidence and retention
Construction evidence can remain commercially or contractually relevant after an item is off-hired, so Hirentra does not apply an arbitrary "delete on off-hire" rule. Evidence is retained according to the customer agreement, configured retention requirements and legitimate audit/security needs.
For a time-boxed pilot, active-system pilot data is normally retained for the pilot and a limited close-out/export period stated in the Pilot Terms, unless the customer instructs earlier lawful deletion or agrees a different retention period. Backup copies may persist until they age out of the controlled backup cycle.
7. Security and incidents
We use role- and tenant-scoped access controls, authentication, audit logging, controlled backups and operational security measures appropriate to the service. No internet service can promise absolute security. Where TheBigBangWorks Ltd becomes aware of a personal-data breach affecting customer data, it will notify the affected controller without undue delay and provide information reasonably required for the controller's legal assessment and notifications.
8. Data subject rights
UK data-protection law may give individuals rights including access, correction, erasure, restriction, objection and portability depending on the circumstances. Where we hold information solely for a customer as processor, requests may need to be handled by that customer as controller. Contact hello@hirentra.com. Individuals may also complain to the UK Information Commissioner's Office.
9. ICO data-protection fee
TheBigBangWorks Ltd will publish its ICO registration reference here when registration is applicable and the reference has been issued. We do not display a reference before one exists.
10. Cookies and changes
The public website should not enable non-essential analytics or marketing storage without the required notice/consent controls. We may update this notice as the product, providers or legal requirements change.
Effective: 8 September 2026.