Privacy Policy
Worker data belongs to the people and plants it describes. This policy explains what we process, why, and how it is protected.
01 Who this policy covers
This policy covers two groups of people: our customers (plants, warehouses, contractors and agencies that use the platform) and the workers whose shifts, attendance and wages are managed on it.
For worker data, the customer is the data fiduciary that decides why and how the data is processed. We process it on the customer’s behalf and under the customer’s instructions.
02 Data we process
- Account data: name, work email, company, designation and login activity of customer users.
- Worker master data: name, employee or contractor ID, mobile number, department, line, skills and certifications.
- Attendance data: punch time, gate, device and method (biometric, RFID, face, or supervisor app with photo and location where enabled).
- Wage data: rates, days worked, overtime, allowances, deductions and payment status.
- Statutory identifiers entered by the customer or contractor, such as UAN and ESI numbers.
- Worker app data: language preference, leave and swap requests, and notification status.
03 How we use it
We use data only to provide the service: building rosters, recording attendance, calculating wages, preparing registers, sending notices to workers and producing staffing forecasts.
Attendance data is used for attendance and wages only. It is not used for unrelated monitoring of workers.
AI staffing forecasts are produced at shift and line level to plan staffing. They are never used to score, rank or penalise individual workers.
04 Biometric and face data
Where customers use biometric or face terminals, templates are kept on the device or stored encrypted, and are used only to identify a worker at the gate for attendance.
Customers are responsible for informing workers and obtaining consent where required. Templates are deleted when a worker is removed or when the customer ends the service.
05 Sharing
We never sell worker or customer data. We do not share it for advertising.
We share data only with infrastructure providers that host and operate the service (such as cloud hosting, SMS and email delivery), under contracts that limit use to providing the service, or where required by law.
Contractors see only the records of their own workers. Workers see only their own records.
06 Security
Data is encrypted in transit and at rest. Access is controlled by role, plant and line, and changes to attendance and wages are logged with user and time.
Backups are taken daily and stored encrypted. Access by our staff is limited to support and operations, on a need-to-know basis.
07 Retention
Attendance, wage and register data is kept for as long as the customer’s account is active, or longer where statutory record-keeping periods require it, as configured by the customer.
When a customer ends the service, data can be exported and is then deleted from active systems within 90 days and from backups on their normal cycle.
08 Workers’ rights
Workers can see their attendance, wages and shifts in the worker app in their own language, and can raise correction requests there.
Requests to access, correct or erase personal data should be made to the employer or contractor. We support customers in responding to these requests.
09 Website forms
When you sign up or contact us through this website, we receive the details you enter so that we can create your account or reply to you. We use a simple security question to block automated submissions.
10 Contact
Questions about this policy can be sent through the Time Office page on this website.