HomePrivacy Policy

Privacy Policy

At TeamTrackin, we prioritise your privacy and data security. Our robust privacy policy is designed to safeguard your personal information while ensuring transparency in how it's collected, used, and shared.

Data Collection • Your Rights • Security • Retention
HomePrivacy Policy
Last updated: 1 October 2026

Purpose and Scope of This Privacy Policy

This policy outlines how TeamTrackin collects, processes, and protects personal data. It applies to all users of the TeamTrackin platform, including employers, employees, and anyone accessing TeamTrackin Services.

Who This Applies To

Employers: Organisations managing team productivity and overseeing performance through TeamTrackin's admin dashboard.
Employees: Individuals using TeamTrackin under employer accounts as Time Reporters, with access to personal dashboards and timesheets.
Platform Users: Other users engaging with TeamTrackin Services, including website visitors, trial users, and API consumers.

If you have any questions, contact our team at support@teamtrackin.com or call us at +44 20 7946 0958.

If you're uncertain about this policy's coverage, please reach out to our team for clarification. We're happy to explain how our privacy practices apply to your specific situation.

Applicability and Eligibility

By using TeamTrackin, you consent to the data practices described in this privacy policy, provided you're at least 18 years old. This policy applies to all registered clients, their teams, and any end users interacting with our platform.

Contact Us

Contact MethodDetails
Support Emailsupport@teamtrackin.com
Phone Number+44 20 7946 0958
Mailing AddressSuite 12, Regency House, 45 Promenade, Cheltenham GL50 1PJ, UK
Data Protection OfficerJames Mitchell — dpo@teamtrackin.com

Personal Data We Collect

We gather information directly provided by you or automatically through your interaction with TeamTrackin.

Provided Data Includes

CategoryExamplesLegal Basis
Basic InformationFull name, email address, company name, job titleContract
Authentication CredentialsLogin IDs, hashed passwords, 2FA preferences, session tokensContract
Team or Company DetailsOrganisation name, team structure, user roles, project associationsContract
Billing InformationPayment method (via Stripe), invoice history, subscription planContract

Information Collected Automatically

CategoryExamplesLegal Basis
Activity TrackingTime logs, screenshots, workspace activity (mouse/keyboard usage), application usageLegitimate Interest
Device InformationIP address, browser type, operating system, hardware details, timezoneConsent
Session DetailsCookies, usage logs, page views, feature interactions, error reportsConsent

Data Minimisation: We only collect data strictly necessary for the purposes stated in this policy. We never collect data outside of tracked working hours unless explicitly configured by the organisation's administrator.

How We Use Your Information

TeamTrackin processes your data for clearly defined, legitimate purposes. We never sell, rent, or trade your personal data to third parties.

Service Delivery
Processing time logs, generating productivity reports, managing timesheets, and providing real-time activity dashboards.
Security & Fraud Prevention
Detecting unusual activity, preventing unauthorised access, enforcing MFA, and protecting account integrity.
Customer Support
Responding to queries, resolving issues, processing support tickets, and providing personalised assistance.
Product Improvement
Analysing aggregated, anonymised usage patterns to improve features, fix bugs, and develop new capabilities.
Communications
Sending account notifications, security alerts, billing receipts, and (with consent) feature announcements.
Legal Compliance
Fulfilling legal obligations including tax reporting, responding to lawful data requests, and maintaining audit trails.

We never sell your data. TeamTrackin does not sell, rent, or trade personal data to any third party for advertising, marketing, or profiling purposes.

How TeamTrackin Shares Your Data

We only share your personal data in limited, clearly defined circumstances with appropriate safeguards.

RecipientPurposeSafeguards
Your Employer (Admin)Admins can view activity data, timesheets, and productivity reports for team membersRBAC Controls
Service ProvidersTrusted sub-processors (AWS, Stripe, Cloudflare, etc.)DPA + SCCs
Legal AuthoritiesWhen required by law, court order, or to protect rights and safetyLegal Obligation
Business TransfersIn the event of a merger, acquisition, or sale of assetsPrior Notice

Sub-Processor Transparency: A complete list of sub-processors is on our GDPR Compliance page. We notify customers at least 30 days before adding a new sub-processor.

Your Rights and Choices

Under the UK GDPR, EU GDPR, and the Data Protection Act 2018, you have the following rights:

RightDescriptionHow to Exercise
AccessRequest a copy of all personal data we hold about youDownload it in TeamTrackin: Settings → Profile → Your data & privacy (web), Profile → My data & privacy (mobile app), or Settings → Your data (client portal). Can't sign in? Email dpo@teamtrackin.com
RectificationCorrect inaccurate or incomplete personal dataAccount settings or email DPO
ErasureRequest deletion ("Right to be Forgotten")Request deletion from the same Your data screen; your employer (or the company, for client portal users) approves it. Can't sign in? Email dpo@teamtrackin.com
Restrict ProcessingLimit how we process your data in specific situationsEmail dpo@teamtrackin.com
Data PortabilityReceive data in machine-readable format (JSON/CSV)Settings → Your data → Download a copy
ObjectObject to processing based on legitimate interestsEmail dpo@teamtrackin.com
Withdraw ConsentWithdraw consent for optional processing at any timeAccount settings or email DPO

We acknowledge requests within 72 hours and fulfil within 30 calendar days.

Client portal users (customers of a company that uses TeamTrackin) can download a copy of their data and ask for it to be deleted in the portal under Settings → Your data. That company is the data controller for its clients and decides deletion requests; TeamTrackin processes the data on its behalf.

No cost: Exercising your data rights is free of charge.

Data Security Measures

We implement industry-leading measures to protect your data against unauthorised access, alteration, or destruction.

Encryption
TLS 1.3 for all data in transit, and AES-256 for password-vault entries.
Access Controls
RBAC, mandatory MFA for admins, and principle of least privilege across all systems.
Infrastructure
Secure cloud servers behind Cloudflare network protection, with restricted access.
Monitoring & Auditing
24/7 intrusion detection, anomaly alerts, audit logs, and regular third-party pen testing.

Breach Notification: We notify the ICO within 72 hours and affected individuals without undue delay, per GDPR Article 33 and 34.

Data Integrity and Retention

We retain data only as long as necessary. When no longer needed, it is permanently deleted.

Data TypeRetention PeriodAfter Expiry
Account profile dataDuration of account + 30 daysPermanently deleted
Hours, activity & productivity historySet by plan: 2 years (Basic, trial or no plan), 4 years (Standard), 6 years (Shift plan), 7 years (Premium & Enterprise)Permanently deleted
Screenshots6 months default (employer can choose 3–12 months)Images permanently deleted
App & website details (window titles, full web addresses, page titles)6 months default (employer can choose 3–12 months)Details removed, totals kept
Location (desktop app & shift GPS)6 months default (employer can choose 6–12 months)Permanently deleted
Shift selfies6 months default (employer can choose 6–12 months)Permanently deleted
Pay, timesheets, shift hours, time off, expenses & HR records8 yearsPermanently deleted
Sickness reasons (free text)12 monthsReason text removed, dates & hours kept
Billing & invoice records8 yearsArchived, then deleted
Support tickets24 monthsPermanently deleted
Technical / server logs6 monthsPermanently deleted
Cookie & analytics data13 months maximumPermanently deleted

Your employer can choose the period for screenshots, app and website details, location and selfies within the ranges above. When screenshot images and app and website details are trimmed, your hours and totals stay for your plan's history period. A shorter period your employer chooses takes effect after 7 days.

Automated Purging: TeamTrackin runs automated retention jobs. Backup copies purged within 30 days. Deletion is irreversible.

International Data Transfers

TeamTrackin primarily stores data within the EEA and UK. For international transfers, we use:

Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914).
UK International Data Transfer Agreement (IDTA) as mandated by the ICO.
Adequacy Decisions where available from the European Commission or UK Secretary of State.
Transfer Impact Assessments (TIAs) for each sub-processor.

Request a copy of the relevant transfer mechanism at dpo@teamtrackin.com.

Updates to This Policy

We may update this policy to reflect changes in practices, technology, or legal requirements.

Material changes: Email and in-app notification at least 30 days before taking effect.
Minor changes: Updated "Last updated" date. Review this policy periodically.
Version history: Previous versions available upon request at dpo@teamtrackin.com.

Experience Seamless and Secure Monitoring

Whether you're an employer or employee, your trust is our top priority. TeamTrackin is built with privacy by design.

Contact MethodDetailsResponse Time
Support Emailsupport@teamtrackin.comWithin 24 hours
DPO Emaildpo@teamtrackin.comWithin 72 hours
Phone+44 20 7946 0958Mon–Fri, 9am–5pm GMT
PostSuite 12, Regency House, 45 Promenade, Cheltenham GL50 1PJ, UK5–7 business days

Supervisory Authority: Lodge a complaint with the ICO at ico.org.uk, or your local EU data protection authority.

Your Privacy, Our Promise

TeamTrackin is built with privacy by design. Start your free trial and experience transparent workforce management.