Privacy Policy
Last updated: 25 September 2026
This policy explains what personal data Boaz collects, why, and what rights you have. Boaz is an offline-first field service and compliance platform operated by Boaz Systems for Malachi Contractors Ltd and the organisations that use it. It covers the Boaz website, the Admin Portal, the Engineer App, and the messages Boaz sends by email, web push and WhatsApp.
Who is responsible for your data
For personal data held in a customer's Boaz workspace (for example their staff, clients, sites and jobs), that customer organisation decides how the data is used and is the controller; Boaz processes it on their behalf. For data about our own website visitors and account holders, Boaz Systems is the controller. You can contact us about privacy at any time at [email protected].
What we collect
- Account details such as name, work email address, mobile number, role and login activity.
- Work records such as jobs, assets, sites, clients, forms, certificates, photos, notes, signatures, start and finish times and materials used.
- Location. When an engineer uses the Engineer App with location enabled, the app may record their device location while they are working, so jobs can be evidenced and scheduled.
- Communications data, including the mobile number, consent status, message templates sent and delivery status of WhatsApp, email and push messages.
- Technical data such as device and browser type, IP address and error reports, used to keep the service secure and working.
How we use it
- To provide the service: scheduling and recording work, producing reports and certificates, and syncing data between devices.
- To send service messages you or your organisation have set up, such as job assignments, reminders and action links.
- To secure the service, prevent misuse, and diagnose faults.
- To meet legal, safety and compliance record-keeping obligations.
Our lawful bases under UK GDPR are performance of a contract, our and our customers' legitimate interests in running and evidencing field work, compliance with legal obligations, and consent where it is required (for example WhatsApp messaging, which you can opt out of at any time).
WhatsApp and Meta
Boaz uses the WhatsApp Business Platform provided by Meta to send service messages. When we send you a WhatsApp message, your mobile number and the message content are processed by Meta under its own terms and privacy policy. We only send WhatsApp messages to people who have opted in, and you can opt out at any time by emailing [email protected] or asking your organisation to withdraw your consent in Boaz. We do not use Meta or WhatsApp data for advertising.
Who we share data with
We do not sell personal data. We share it only with service providers that help us run Boaz (such as hosting, email delivery, messaging, accounting integrations like Xero where a customer connects them, and error monitoring), with the customer organisation that owns the workspace, and where the law requires it. Some providers, including Meta, may process data outside the UK; where they do, appropriate safeguards such as the UK International Data Transfer Addendum are relied on.
How long we keep it
We keep data for as long as the customer's account is active and then for as long as needed to meet legal, contractual and compliance obligations (compliance and safety records often have to be kept for several years). After that it is deleted or anonymised.
Your rights
You have the right to access, correct or delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent. To use these rights, contact [email protected]; see also our data deletion page. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
We may update this policy from time to time. The date at the top shows when it was last changed.