Employee Privacy Notice
Issued by: TnT Apps UK
On behalf of: Your Company
Effective Date: 2 November 2025
Contact: info@tntapps.co.uk
1. Purpose of This Notice
This notice explains how TnT Apps UK, on behalf of Your Company, collects, uses, and protects personal information about employees, workers, and contractors who use our internal clock-in / sign-in system (the “App”).
It fulfils our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who Controls Your Data
Your data is controlled by Your Company (“the Company”).
Google Ireland Ltd, through its Firebase platform, provides secure hosting and acts as our Data Processor.
3. Data We Collect
When you use the App, we may record:
- Your name or staff ID
- Clock-in and clock-out times
- Optional photos/selfies for attendance verification
- Device and network identifiers (IP address, browser type) for security only
We do not collect continuous tracking data or unnecessary personal details.
4. Why We Collect It (Lawful Basis)
We process this data under the lawful basis of contractual necessity and legitimate interest to:
- Manage attendance and shift records
- Ensure site security and accountability
- Meet employment and health-and-safety obligations
Separate consent is not required for these standard employment purposes.
5. How Long We Keep It
Clock-in data and photos are normally retained for up to 12 months after collection, unless required longer for legal, payroll, or disciplinary reasons.
After that, records are securely deleted or anonymised.
6. Where and How Data Is Stored
All information is stored using Google Firebase data centres located in the UK/EU region (London or Belgium).
Data is encrypted in transit and at rest.
Access is restricted to authorised managers and IT administrators of Your Company.
7. Sharing and Disclosure
We do not sell or share your data with external third parties.
Information is shared only:
- Internally with authorised company management; or
- Externally if required by law or regulatory authority.
Google Ireland Ltd acts solely as a data processor under its Data Processing Agreement (DPA) with us.
8. Your Rights
Under the UK GDPR, you have the right to:
- Access a copy of your personal data
- Request correction of inaccurate information
- Request deletion (“right to be forgotten”) where applicable
- Object to or restrict certain types of processing
To exercise these rights, contact info@tntapps.co.uk or your line manager.
We will respond within one month.
9. Data Breach Procedure
If a personal-data breach occurs, it will be investigated immediately.
Serious incidents will be reported to the Information Commissioner’s Office (ICO) within 72 hours and, if necessary, to affected staff.
10. Changes to This Notice
We may update this notice as systems or legal requirements change.
The latest version will always be available from HR or within the App.
11. Contact Details
Data Protection Lead: TnT Apps UK
On behalf of: Your Company
Email: info@tntapps.co.uk
Registered Address: 29 Sinnott Road, Walthamstow, London E17 [postcode]