Staff portal privacy notice
This notice describes the data handled by the parslia.net staff portal. It is separate from the public Parslia subscription app and the Vedānta guest-booking website.
Workspace-specific details, including the responsible legal entity, lawful basis, retention periods and authorised access arrangements, need confirmation by the workspace operator. This technical notice is not a claim that those arrangements have been audited.
Account and profile information
When configured, sign-in uses Google Firebase Authentication. Registration asks for a name, email address, password and job role. Google sign-in can supply a name, email address and account identifier. The portal writes profile details, a last-seen timestamp and the last visited page to Firebase Firestore. Password handling is performed through Firebase Authentication, not a public staff list.
Activity and working records
For signed-in users, the portal can record pages visited, selected navigation links, training-video play and progress events, and form-save events with timestamps and record identifiers. Working forms, rotas and sign-offs may contain names, dates, notes and the account associated with a save. Managers should explain how they use these records before staff are asked to enter personal information.
Storage on your device
The “Remember email” option stores an email address in this browser. Other pages use browser storage for draft forms, rota entries and preferences. The service worker stores public site files for offline use. These are separate from records saved to the shared database; a local save does not prove a shared save succeeded.
Use an authorised device, sign out after use and do not leave confidential information on a shared browser. Clearing site data can remove unsynchronised drafts. Confirm important records are safely saved or exported before clearing it.
Services used by this portal
Site files are hosted on GitHub Pages. Authentication and connected database functions use Google Firebase. Some pages load Google Fonts or embedded training media from external providers. Visiting those pages can send connection information, such as an IP address, to the provider. Their own privacy information also applies to their services.
Access, retention and requests
Browser sign-in redirects do not make static HTML confidential. Do not upload sensitive staff, guest or medical records to public site files. Database permissions and retention must be managed by the workspace operator; the dashboard does not verify them.
For questions about your information, corrections, access or deletion requests, contact shyam.prasad@thevedanta.org. Include only the information needed to identify the request. Do not email passwords or confidential records without an agreed secure method.
Read more about personal-information rights and raising a concern at the Information Commissioner’s Office.