Privacy Policy

This Privacy Policy explains how Trickle Hub Ltd (“we”) handles personal data in connection with the Trickle Hub platform. For personal data your organisation uploads about its own staff, your organisation is the data controller and we act as processor under the Data Processing Agreement.

1. Data we process

• Account data — names, work email, role, and authentication data for people who sign in.
• Customer Data — the HR information your organisation stores (employees, attendance, documents, leave, etc.).
• Usage & device data — logs, IP address, and activity needed to secure and operate the Service.
• Billing data — plan and payment metadata; card details are handled by our payment processor, not stored by us.

2. How we use it

To provide, secure, support and improve the Service; to process payments; to communicate about your account; and to comply with legal obligations. We do not sell personal data.

3. Legal bases

Where the UK/EU GDPR applies, we rely on performance of a contract, our legitimate interests in operating and securing the Service, consent (where required), and compliance with legal obligations.

4. Sharing

We share personal data with sub-processors that help us run the Service (e.g. hosting, email delivery, payment processing), each bound by appropriate contractual safeguards, and where required by law.

5. Retention

We retain personal data for as long as your workspace is active and as needed for the purposes above. On deletion of a workspace, Customer Data is deleted or anonymised within a reasonable period, subject to legal retention requirements.

6. Security

We use technical and organisational measures including tenant isolation, encryption in transit, access controls, optional two-factor authentication, audit logging and regular backups. No system is perfectly secure, and you are responsible for access you grant within your workspace.

7. International transfers

Where personal data is transferred across borders, we use appropriate safeguards such as standard contractual clauses.

8. Your rights

Subject to applicable law you may request access, correction, deletion, restriction, or portability of your personal data, and may object to certain processing. Workspace admins can export their workspace data in-app and request deletion. To exercise rights, contact privacy@tricklehub.com. For Customer Data, please contact your own organisation (the controller).

9. Contact

Questions about this policy: privacy@tricklehub.com.