GDPR & Data Protection

1. About This Page

This page provides information about how Payrovia Flex complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It supplements our Privacy Policy with specific information about your data protection rights.

2. Data Controller

Payrovia Flex Ltd is the data controller responsible for your personal data.

• Company: Payrovia Flex Ltd
• Contact: privacy@payroviaflex.com
• Address: United Kingdom

3. Legal Basis for Processing

We process your personal data under the following legal bases:

3.1 Contract Performance

We process data necessary to provide our services to you, including:

• Account management and authentication
• Job matching and applications
• Time tracking and timesheet processing
• Payment processing

3.2 Legal Obligation

We process certain data to comply with legal requirements, including:

• Right-to-work verification
• Tax and financial records
• Employment law compliance
• Fraud prevention

3.3 Legitimate Interests

We process some data based on our legitimate business interests, including:

• Improving our services and user experience
• Security and fraud prevention
• Customer support
• Business analytics

3.4 Consent

Where required, we obtain your consent for:

• Marketing communications
• Non-essential cookies
• Special category data processing (where applicable)

4. Your Data Protection Rights

Under UK GDPR, you have the following rights:

4.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "Subject Access Request" (SAR). We will respond within one month.

4.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update most information directly in your account settings.

4.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when:

• The data is no longer necessary for its original purpose
• You withdraw consent (where consent was the legal basis)
• The data was unlawfully processed

Note: We may need to retain certain data for legal or legitimate business purposes (e.g., tax records, dispute resolution).

4.4 Right to Restrict Processing

You can request that we limit how we use your data while we address a concern you have raised, such as if you contest the accuracy of the data.

4.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller.

4.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

4.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you, unless necessary for a contract or with your explicit consent.

5. How to Exercise Your Rights

To exercise any of your data protection rights, please contact us:

• Email: privacy@payroviaflex.com
• Subject line: Data Protection Request

Please include in your request:

• Your full name and email address associated with your account
• Which right(s) you wish to exercise
• Any relevant details to help us locate your data

We may need to verify your identity before processing your request. We will respond within one month of receiving your request, or inform you if we need an extension.

6. International Data Transfers

Your data is primarily stored within the United Kingdom and European Economic Area. If we transfer data outside of these areas, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the ICO
• Transfers to countries with adequate data protection (adequacy decisions)
• Other lawful transfer mechanisms

7. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify the Information Commissioner's Office (ICO) within 72 hours
• Notify affected individuals without undue delay if the breach is high risk
• Document all breaches and our response

8. Complaints

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the supervisory authority:

We encourage you to contact us first so we can try to resolve your concerns directly.

9. Updates to This Information

We may update this page from time to time to reflect changes in our practices or legal requirements. Please check back periodically for any updates.

10. Contact Us

For any questions about data protection at Payrovia Flex, please contact:

• Email: privacy@payroviaflex.com
• Address: Payrovia Flex Ltd, United Kingdom