Privacy Notice
Who we are
trading as Weekli is Controller for its own billing, direct customer/account administration, support, security, fraud/abuse prevention and legal/corporate information. For most workforce and operational records, the subscribing organisation/employer is Controller and Weekli processes the data on that organisation's behalf.
Information we handle
Depending on context: name, email, role, company/account data; billing contacts; support records; login/MFA/security/audit metadata; browser/push subscription information; and Customer Data processed for customer companies including timesheets, pay/rates, holidays/absence, sites, vehicles, work/forms/certificates, photographs and signatures.
Special-category information
Weekli does not require medical diagnoses for general absence recording. A simple absence status may not itself reveal health information, but sickness details or diagnoses can become special-category data. Customers and users should minimise sensitive detail and follow the employer's policy where health information is genuinely required.
Why we use information
For our own Controller data, purposes include performing customer contracts/account administration, legitimate interests in service security/support/abuse prevention, and legal obligations such as accounting/compliance. Where Weekli is Processor, the customer determines its lawful basis for workforce/operational data.
Who receives information
Authorised Weekli personnel, core infrastructure/service providers, professional advisers under confidentiality, authorities where legally required and parties involved in a genuine corporate transaction subject to safeguards. Core service providers are listed in the Subprocessor Notice.
International transfers
Where Weekli is responsible for a restricted transfer, it will use an applicable lawful route and any required assessment/data-protection test.
Retention
Customer operational records follow the customer's lawful instructions/configuration rather than a single blanket Weekli period. Weekli's own billing, security and support records are retained only for documented legal, security and business needs. Protected backup deletion may follow the provider's normal backup cycle.
Your rights
Where Weekli is Controller, individuals may have rights of access, correction, erasure, restriction, portability and objection depending on the circumstances. Requests about employer-controlled workforce records should generally be made to the employer/customer Controller; Weekli will assist that customer as Processor.
Complaints and contact
Privacy contact: . You may also complain to the UK Information Commissioner's Office where applicable.
Automated decision-making
Weekli does not currently make solely automated decisions that produce legal or similarly significant effects. Calculations and status indicators support human customer decisions.