Privacy Policy

Who we are

High Mesa Ltd, trading as Yumee, 123 Kings Mill Way, Denham, Uxbridge UB9 4BT. Contact: support@yumeeservices.com.

What we collect

Account data (name, email, company details, billing contact) to run your subscription. Employee data entered by your organisation (names, PINs stored hashed, clock-in times, optional photos and face templates) to provide time and attendance. Technical data (device identifiers, IP addresses, logs) to keep the Service secure.

Biometric data

Where your organisation enables face recognition, we store, for each consenting employee, a face template used for matching and the reference photo taken at enrolment, securely in the UK. Both are deleted when the employee is marked as a leaver, when their face is removed, or when consent is withdrawn. Photos captured at clock-in are deleted automatically after the retention period your organisation configures (default 90 days).

Roles

For employee data we act as processor on behalf of your organisation (the controller). For account and billing data we are the controller.

Where data is stored

All personal data is stored and processed in the United Kingdom. Details of our service providers are available on request.

Your rights

Employees should direct access, correction or deletion requests to their employer; we support the employer in fulfilling them. Account holders can export or delete their data from the panel or by contacting us.

Our mobile apps

Yumee Work (employee app) shows a member of staff their own shifts, tasks and time off. Where their employer switches it on, they can also clock in from their phone: the location is read once, at the moment they clock in, and compared with the workplace's boundary. There is no background or periodic location access, and no location is read when the feature is switched off. An optional photo may be taken at clock-in if the employer requires one. Yumee Workforce Kiosk runs on the employer's own tablet and records clock-in and clock-out with a face, PIN or QR badge, plus a photo where enabled. Neither app contains advertising, analytics profiling or third-party tracking.

Deleting app data and accounts

A Yumee Work sign-in is an account your employer creates for you as part of their workforce records, not a personal account with us. To delete it, or to have your data removed:

• Staff: ask your employer. They can revoke your app access immediately (Employee → Yumee Work app → Revoke), delete your face data, withdraw biometric consent, or remove your record entirely, from their panel. You can also email support@yumeeservices.com and we will pass the request to them and support them in fulfilling it, as the law requires of us as processor.
• Employers (account holders): export or delete an individual employee's data from the employee's profile, or the whole organisation's data from Settings, at any time. On request we delete the entire account: biometric templates, photographs, clock records and account data are permanently removed, except invoices we must keep for 6 years by law.
• Signing out of the app removes the notification registration for that phone; uninstalling removes all data the app kept on the device.

Retention

Account data for the life of the subscription plus 30 days; invoices for 6 years (HMRC); clock records as configured by your organisation.

Network Services

If we survey or work on your network (Terms, clause 15), we hold your site address and site contact, and the details of your network and equipment we need to plan, install and support it, for as long as we provide that work and support, and as long as our records must be kept by law.

Enquiries from this website

If you use the contact form on yumeeworkforce.com, we receive your name, email address, the topic and your message, and any phone number, company and site details you add. They reach our support mailbox by email; the website does not store the message. We use them only to reply to you and follow up on your enquiry. To stop abuse, a one-way hash of your network address is used to limit messages per hour and is deleted automatically within a day. We do not add you to any mailing list.

Cookies

The website uses no advertising or analytics cookies. The panel uses strictly necessary storage to keep you signed in.