Privacy Policy

1. Who we are

PeopleHub is an HR and holiday management platform operated by Trade Centre Technologies Ltd (company number 16894959), registered office 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE. We are the data controller for the personal data processed through this platform on behalf of the business that invited you.

2. What we collect

To run HR and holiday management we process:

• Account details: name, work email, personal email, and sign-in credentials.
• Employment details: job title, team, start date, contract type, and working pattern.
• Contact and emergency contact information: phone, address, and next of kin.
• Holiday and absence records: requests, approvals, dates, and allowance balances.
• Performance review notes and goals recorded by your manager.
• Documents you or your manager upload, such as contracts of employment.
• Optional connected account data, such as your Google Calendar, only when you link it.

3. Why we use it

We use your data to manage your employment, book and approve holidays, record absences, track allowances, schedule reviews, and send you notifications about your requests. We only process what is necessary for these purposes.

4. Lawful basis

We process personal data under the lawful bases of contract (to administer your employment), legal obligation (e.g. payroll and statutory leave records), and legitimate interests (e.g. workforce planning and absence trend analysis). Sensitive data such as sickness reasons is processed only where necessary and with appropriate safeguards.

5. Who we share it with

Your data is visible to your employer and to managers within your business who need it to manage staff. We use sub-processors for hosting and email delivery, and we share calendar event data with Google only if you connect your Google Calendar. We do not sell your data.

6. How long we keep it

We keep employment records for as long as you are employed and for the legally required retention period afterwards. Holiday and absence records are retained per statutory requirements. You can request deletion of your account data, subject to legal retention obligations.

7. Your rights

Under UK GDPR you have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact your employer's HR administrator or email us at privacy@tradecentre.app.

8. Security

Data is stored on encrypted infrastructure with row-level access controls. Only authorised users within your business can access your records. Connected service keys are encrypted at rest.

9. International transfers

Where data is processed outside the UK, we rely on appropriate safeguards such as Standard Contractual Clauses to protect your data.

10. Contact

For any privacy questions or requests, contact privacy@tradecentre.app.