Privacy notice for staff

Who is responsible

The shop you work for runs this app to order stock. The shop owner decides how your information is used and is the person to ask about it.

What we keep

• Your account: your name (if given), work email, whether you're an owner or staff, and when you joined.
• Signing in: failed sign-in attempts, with the time and the internet address they came from, so the app can lock out someone guessing passwords.
• Your stock requests: the item, size, how low it is, how many cases and when you sent it.

We don't track where you are, and we don't use your information for advertising.

Why

To run the shop: so the owner knows what needs ordering and who asked, and to keep the app secure. This is part of your work, so the shop relies on its legitimate interest in running the business.

Who can see it

• The shop's owner and managers. Other staff only see their own requests.
• The companies that host the app for the shop: Amazon Web Services (the server, in London) and Cloudflare (photo and file storage, in the EU), and the error-reporting service that tells the shop when something breaks. They only handle it on the shop's behalf, and UK data protection law treats the EU as giving the same protection as the UK.

How long we keep it

• Requests: kept as the shop's stock history.
• Your account: while you work at the shop. When you leave, the owner can remove your name and email, after which your old requests show as "Former staff member".

Your rights

You can ask the shop owner for a copy of your information, to correct it, or to remove it. The owner can download your information or remove it from the app. If you're unhappy with how it's handled, you can complain to the Information Commissioner's Office at ico.org.uk.