Privacy Policy

Staffology HR acts as "data processor" and your employer acts as "Data Controller". If you have a specific question or concern about how your data is processed by Staffology HR , please speak to your employer in the first instance. Your employer may contact us for further information where appropriate.

Our address is IRIS Group Limited (470 London Road, Slough, SL3 8QY).

You have certain rights under data protection laws, such as the right to be informed about how your personal information is being used, and the right to access the personal information held about you.

Speak to your employer about the full rights available to you and how you may exercise your rights in relation to the processing of your data.

Further information is also available on the Information Commissioner's website.

Your employer uses Staffology HR to help them look after the personal and sensitive information they collect about you relating to your employment with them. Ask your employer for details about what they collect, how and why they collect it, and how they use it.

We store the data on your employer's behalf and our software performs calculations and provides insights to them based on it in line with the agreement your employer has with us.

We do not see any of your personal or sensitive data ourselves, unless you or your employer specifically chooses to share it with us in order to help resolve an issue. On that basis, the people who might see your data at IRIS include database administrators and support team members.

If your employer chose to use our cloud-based data storage, all of your personal data within Staffology HR is kept on secure computer servers located in the United Kingdom.

If you choose to allow analytics cookies in your settings, any analytics data that is collected about your visit is stored on secure servers within the EU. These servers are managed by our analytics partner, Gainsight (more details below in 'Cookies and analytics').

Our UK data centres are in secure locations and protected with various security features, including firewalls and IP restrictions. The Staffology HR software and the servers they are on undergo routine security testing. If you would like more detail, please send a formal request for information.

We provide various methods of user account authentication, with options for different third-party providers and technologies. Ask your employer about the method of authentication they have configured for you.

Data is stored on the system in line with your employer's data retention policy and you should contact them for information.

We do not keep a copy of your personal data after you or your employer has deleted it, although a log of the change may be kept for a limited period for auditing or legal purposes. You employer has access to these logs and is responsible for managing and deleting them in line with their retention policy.

You may access or update the information in Staffology HR by using the application itself, or by asking your employer to do so on your behalf.

The Staffology HR software includes webhooks, APIs and data export options to allow your employer to export/save data and share data with other systems under their control. Ask your employer about how they use these tools and how your data is protected.

This product uses cookies. Cookies are small text files stored on your computer when you visit certain sites. They are used to remember your preferences.

The tables below explain the cookies we use and why. To make this information as clear as possible, as well as listing the cookies we use, we've categorised them to help explain what they do.

Staffology HR uses "essential" Cookies to carry out activities that are strictly necessary for the operation or delivery of the Service. These cookies are used for activities which are strictly necessary to deliver or operate the service you requested from us and do not require consent.

Staffology HR also uses optional cookies to measure traffic and analyse user behaviour with the goal of improving the service.

IRIS is constantly aiming to improve its products for its Customers. When you consent to the placing of analytics cookies within a product you are using, we use a supplier called Gainsight to collect information to help us understand how a user interact with the Product. The purpose of this is generally to understand and improve our customers experience when using our products. The reasons or benefits to using analytics cookies are outlined in further detail in the table below.

The legal basis we rely on to place cookies and collect analytics data is consent.

If you consent to the analytics cookie, we will collect anonymous information about your usage activity within the Product, such as the most frequently used functionality and the session duration. The cookie will also collect some commercial data such as Company name, county code, company location, inferred company industry, Licence number.

No cookies are stored on your device, or data collected and shared on your use of the product unless you have consented.

Data is retained within Gainsight for a rolling 24-month period and will be automatically deleted after this time.

We share the data with our subprocessor Gainsight.

Your data is stored on secure servers within the EU. We are committed to ensuring that your information is secure. IRIS has implemented generally accepted standards of technology and operational security in order to protect personal data from loss, misuse, or unauthorised alteration or destruction, in accordance with the requirements of Data protection laws.

We rely on consent to collect data for analytics. This means you have the right to withdraw your consent at any time. If you have consented, you can opt out of analytics tracking at any time by changing your preferences using the cookie icon located in the bottom left-hand corner (you will need to log-in to your account to do this), or contact us for assistance. When you opt out, tracking will stop immediately and relevant cookies will be removed the next time your browser refreshes.