1. Introduction
Jamie Technologies Ltd ("Jamie HR", "we", "us" or "our") provides the Jamie HR platform and associated services for workforce management.
This Privacy Policy explains how personal data is processed in connection with Jamie HR, associated mobile applications, and related support services.
For most personal data processed through the Platform, Jamie HR acts as a Data Processor on behalf of its customer, which is the Data Controller. The Controller determines the purposes of processing and remains responsible for providing privacy information to its workforce and other end users.
In limited circumstances, Jamie HR may act as a Data Controller for its own business purposes, for example where we process contact details for customer account management, service communications, security, billing, legal compliance, and support.
2. Scope
This Policy applies to personal data processed through:
- the Jamie HR web platform;
- the Jamie HR iOS and Android mobile applications;
- customer support, account administration, and related service operations; and APIs and technical services used to deliver the Platform.
This Policy does not apply to third-party websites, products, or services that are not operated by Jamie HR, even where they are linked to or integrated with the Platform.
3. Personal Data We Process
We process only the personal data required to provide the Platform and only in accordance with the Data Controller's documented instructions, unless otherwise required by law.
Personal data processed through the Platform may include:
- Identity and profile data, such as full name, date of birth, work contact details, employee number, user ID, organisation details, and job role.
- Employment data, such as start date, employment status, contract type, working pattern, tenure, notice period, absence records, and holiday information.
- Task and workflow data, such as onboarding tasks, HR actions, compliance tasks, approvals, reminders, and completion history.
- Technical and usage data, such as IP address, device identifiers, operating system, browser type, authentication events, audit logs, session information, and activity logs.
- Support and communications data, such as business contact details and records of correspondence with administrators or customer representatives.
4. Sources of Personal Data
Depending on the service configuration, personal data may be obtained from:
- the Data Controller and its authorised administrators;
- employees, workers, contractors, or applicants using the Platform;
- integrated third-party systems selected by the Controller; and
- technical logs generated through use of the Platform.
5. Purposes of Processing
As Processor, Jamie HR processes personal data only to deliver the Platform and related services, including to:
- create and manage user accounts;
- support onboarding, HR administration, and workforce record management;
- maintain audit trails, reporting, and workflow history;
- monitor service performance, availability, and security;
- prevent misuse, fraud, unauthorised access, and other security incidents; and
- provide customer support and technical assistance.
6. Legal Basis
Where Jamie HR acts as Processor, the legal basis for processing is determined by the Data Controller.
The Controller may rely on one or more lawful bases, including contractual necessity, compliance with a legal obligation, legitimate interests, or explicit consent where required.
Where Jamie HR acts as Controller for its own limited business purposes, our legal bases may include contractual necessity, compliance with legal obligations, and our legitimate interests in operating, securing, and improving our services.
7. Mobile App Permissions and Device Data
The Jamie HR mobile applications may request access to device features only where required for Platform functionality. Depending on the features enabled, this may include camera access for document capture, photo library access for uploads, push notifications, and device-based authentication features.
These permissions are requested by the application or device operating system at the point of use. Users can manage permissions through their device settings. Refusing certain permissions may limit specific Platform functionality.
We do not access device data beyond what is reasonably necessary for the relevant feature.
8. Sharing of Personal Data
We may disclose personal data only where necessary to provide the Platform, comply with law, or protect the security and integrity of the service.
Recipients may include:
- the relevant Data Controller and its authorised users;
- Stripe, our payment provider, for processing card and direct debit payments and billing (Stripe acts under its own terms and privacy policy, and we do not store full card numbers);
- sub-processors engaged to provide infrastructure, hosting, communications, support, analytics limited to service operation, or other technical services; and
- regulators, courts, law enforcement agencies, or other authorities where disclosure is legally required.
Limited business contact data may be shared with selected third-party service providers for the purpose of facilitating business-to-business referrals via the Jamie HR Trusted Network. Such functionality is not available to individual end users via mobile applications.
9. Sub-processors
Jamie HR uses carefully selected sub-processors to support delivery of the Platform.
Each sub-processor is subject to a written agreement requiring appropriate confidentiality, security, and data protection obligations.
A current list of sub-processors may be made available to customers in accordance with the applicable contract or data processing agreement.
10. International Transfers
Where personal data is transferred outside the United Kingdom, Jamie HR will ensure that the transfer is subject to an appropriate safeguard, such as a UK adequacy regulation, the UK International Data Transfer Agreement, or another lawful transfer mechanism.
We take steps to ensure that transferred personal data receives a level of protection consistent with applicable data protection law.
11. Retention
As Processor, Jamie HR retains personal data only for as long as necessary to provide the Platform and in accordance with the Controller's instructions, the parties' contract, and applicable law.
On termination or expiry of the services, personal data will be returned, deleted, or securely disposed of in accordance with the applicable agreement, except where retention is required by law or necessary for the establishment, exercise, or defence of legal claims.
12. Security
Jamie HR implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures may include encryption in transit and at rest, access controls, role-based permissions, authentication controls, audit logging, system monitoring, backup processes, vulnerability management, and incident response procedures.
No system can be guaranteed to be completely secure. However, we maintain security controls proportionate to the nature of the data and the risks presented by processing.
13. Data Subject Rights
Where Jamie HR acts as Processor, individuals should direct requests relating to their personal data to the relevant Data Controller.
Such rights may include the right to request access, rectification, erasure, restriction, portability, and objection, subject to applicable law.
Jamie HR will provide reasonable assistance to the Controller in responding to valid requests where required under applicable law or contract.
14. Automated Processing
The Platform may use automated processing to support compliance alerts, reminders, or status outputs. Unless expressly stated by the Data Controller, Jamie HR does not make solely automated decisions that produce legal effects or similarly significant effects on individuals on its own behalf.
Controllers remain responsible for ensuring that any automated decision-making they configure complies with applicable law.
15. Children's Data
The Platform is intended for business use and is not directed at children.
We do not knowingly collect or process personal data from children through the Platform unless expressly instructed by a Data Controller for a lawful and documented business purpose.
16. Third-Party Services
Where the Platform integrates with third-party products or services selected by the Controller, processing by those third parties is governed by their own terms and privacy documentation.
Jamie HR is not responsible for the independent privacy practices of third-party services acting outside our role as Processor.
17. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation, service functionality, or processing practices.
The latest version will be made available through the appropriate customer or application channel, and the Effective Date at the front of this document will be updated accordingly.
18. Contact
For privacy-related questions about Jamie HR, contact:
Jamie Technologies Ltd
Email: data@jamiehr.com
Address: 9 Caxton House, Broad Street, Cambourne, Cambridge, CB23 6JN, United Kingdom
19. Complaints
If you are dissatisfied with the way personal data has been handled, you should first contact the relevant Data Controller or Jamie HR using the details above, as appropriate.
Individuals in the United Kingdom may also raise concerns with the Information Commissioner's Office.