Introduction

At Get Paid Payroll (GPP) Outsourcing, your privacy and data protection are of paramount importance. This Privacy Statement explains how we collect, use, disclose, and safeguard personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all personal information handled by GPP, including data relating to our clients, their employees, partners, website visitors, and service users. By using our services or website, you acknowledge that you have read and understood this Privacy Statement.

1. Our Commitment to Privacy

We are committed to:

Protecting personal data and ensuring confidentiality.
Collecting only the information necessary for legitimate business purposes.
Processing data fairly, transparently, and lawfully.
Storing data securely using advanced technical and organisational safeguards.
Respecting the rights of individuals under data protection legislation.

2. Information We Collect

GPP collects personal and business information as necessary to deliver payroll outsourcing and related services.

Personal Data We May Collect Includes:

Name, title, and contact details (email address, telephone number, postal address).
Employment and payroll details (salary, tax code, National Insurance number, pension contributions).
Bank account information for payment processing.
Identification details for verification purposes.
Communication records and correspondence.
Data provided through our website forms or email enquiries.

Automatically Collected Information:

When you visit our website, we may automatically collect certain information through cookies and analytics, such as:

IP address and browser type.
Operating system.
Pages visited, duration of visit, and referring website.

This information helps us improve website performance and user experience.

3. How We Use Personal Information

We use personal data strictly for legitimate business purposes, including:

Processing payroll and managing employee records.
Calculating and remitting tax and pension contributions.
Managing client accounts and invoicing.
Communicating with clients, partners, and service users.
Complying with legal, regulatory, and contractual obligations.
Improving our services and maintaining system security.
Responding to enquiries and support requests.

We do not use personal data for any purposes unrelated to our services, nor do we sell or rent data to third parties.

4. Legal Basis for Processing

We process personal information under the following legal bases:

Contractual necessity – to perform our obligations under client agreements.
Legal obligation – to comply with employment, tax, and financial laws.
Legitimate interests – to maintain efficient business operations.
Consent – when explicitly provided for specific purposes, such as marketing communications.

5. Sharing and Disclosure of Information

GPP may share data with trusted third parties only where necessary to perform contractual or legal duties. These include:

Payroll software providers and IT partners.
Pension administrators and tax authorities (e.g., HMRC).
Banks and payment processors.
Professional advisers such as auditors or legal consultants.

All third parties handling personal data on our behalf are bound by confidentiality and data protection agreements ensuring full compliance with UK GDPR.

We will never share data with unauthorised or unverified parties.

6. International Data Transfers

In limited cases where data may be transferred outside the UK or EEA, such transfers will only occur where:

The destination country has been deemed to provide adequate protection by the UK Government.
Standard contractual clauses approved by the ICO are in place.
Appropriate technical and organisational safeguards exist.

We take all necessary steps to ensure your data remains protected, regardless of where it is processed.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

Statutory requirements under tax or employment law.
Contractual obligations.
Regulatory compliance.

Once retention periods expire, data is securely deleted or anonymised in accordance with our Data Retention and Disposal Policy.

8. Security of Personal Data

We employ robust security measures to protect personal data from unauthorised access, loss, or misuse.
Our safeguards include:

Encrypted data transmission and secure servers.
Multi-factor authentication for access control.
Regular security audits and monitoring.
Staff training on data protection and confidentiality.
Controlled access to sensitive information.

While no system is completely immune to risk, GPP continuously reviews and enhances its security infrastructure.

9. Your Data Protection Rights

Under the UK GDPR, you have the following rights:

Access – to request copies of your personal data.
Rectification – to correct inaccurate or incomplete information.
Erasure – to request deletion of data where legally permissible.
Restriction – to limit how your data is processed.
Portability – to receive your data in a transferable format.
Objection – to object to certain processing activities.
Withdrawal of consent – where processing is based on consent.

To exercise your rights, please contact us at info@getpaidpayroll.com.
We will respond to all valid requests within one month, as required by law.

10. Cookies and Online Tracking

Our website uses cookies to enhance user experience and gather analytics.
Cookies help us understand visitor behaviour, improve website performance, and deliver personalised content.

You can manage or disable cookies through your browser settings. For more information, please review our Cookies Policy.

11. Data Breach Management

In the unlikely event of a personal data breach, GPP will:

Take immediate action to contain and assess the incident.
Notify affected individuals where required.
Report the breach to the Information Commissioner’s Office (ICO) within 72 hours if necessary.
Review and strengthen controls to prevent recurrence.

12. Links to Third-Party Websites

Our website may include links to external sites for your convenience.
GPP is not responsible for the privacy practices or content of third-party websites.
We encourage users to review each external site’s privacy policy before providing any personal data.

13. Children’s Privacy

Our services are intended for business use and not directed at individuals under 18 years of age.
We do not knowingly collect or process data relating to minors.

14. Updates to This Privacy Statement

We may update this Privacy Statement periodically to reflect changes in law, regulation, or our practices.
The latest version will always be available on our website.
We encourage users to review this page regularly to stay informed.

15. Contact Information

For questions, requests, or complaints regarding this Privacy Statement or our data protection practices, please contact:

Email: info@getpaidpayroll.com
Telephone: +44 208 145 3355
Address: Ability House, 121 Brooker Road, Waltham Abbey, EN9 1JH, United Kingdom

If you are unsatisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO) via www.ico.org.uk.