- Where: all personal data is stored and processed in the United Kingdom.
- Face data: a face template and the reference photo taken at enrolment, only with recorded consent; deleted automatically when the employee is marked as a leaver, and whenever you remove the face or record a withdrawal of consent.
- Photos: kept for the retention period you set, then deleted automatically.
- Retention: clock records are kept for the statutory period; the audit-log retention is configurable.
- Your rights as controller: export all company data (JSON, Billing → Export all data) or one employee's data (subject access) from the panel at any time; delete an employee at any time. The whole account is permanently deleted 30 days after your subscription ends (invoices are kept as the law requires), or earlier on request. We act as processor under the Data Processing Agreement linked in the footer; the current list of service providers is available on request.
Last updated 26 September 2026
Was this helpful?Tell us what is missing