Privacy Policy

Introduction

This Privacy Policy explains how 5 Star Desi Payroll (a trading style of Hsgs Limited, Company No. 16404189)
collects, uses, shares, and protects personal data. We comply with UK GDPR and the Data Protection Act
2018. We act as a Data Controller for client and prospect data processed for sales/marketing and service
delivery.

Data we collect

• Identity & Contact: name, email, phone, job title, company name, postal address. • Business & Payroll:
employee names, hours, pay rates, National Insurance numbers, tax codes, CIS status, UTRs, VAT numbers,
invoices, bank details provided for payments. • Technical: IP address, device/browser info, cookies/analytics
events. • Communications: emails, call notes, support tickets, uploaded documents.

How we use data (lawful bases)

• Provide services (Contract): run payroll, generate payslips, submit RTI/CIS/VAT, process payments via
banking partners. • Compliance (Legal Obligation): AML/CTF checks; HMRC reporting; record keeping. •
Legitimate Interests: business development, service improvement, fraud prevention, analytics. • Consent:
marketing emails/texts where required; certain cookies/analytics where required.

Sharing data

We may share data with: (i) HMRC and UK regulators; (ii) banking/payment partners; (iii) accountants/
professional advisers; (iv) vetted IT vendors (hosting, backups, email, analytics, ticketing). All vendors are
bound by contracts and confidentiality. We do not sell personal data.

International transfers

Where suppliers host or process data outside the UK, we use approved safeguards (e.g., UK IDTA or SCCs)
and conduct transfer risk assessments.

Retention

We keep records for as long as necessary for the purpose collected: typically payroll/tax records for 6 years
after the tax year; marketing leads for up to 24 months from last interaction; support records for 24 months;
CCTV/telephony (if used) per policy. We securely delete/anonymise when no longer needed.

Your rights

Individuals may have rights to access, rectification, erasure, restriction, portability, and to object. To exercise
rights, email payroll@hsgsglobal.co.uk. You can complain to the ICO at ico.org.uk if you are unhappy with our
handling of data.

Security

We implement access controls, encryption in transit, MFA where available, regular updates/patching, and
vendor due diligence. Data is stored in reputable UK/EU data centres where possible.

Marketing

We may send B2B marketing to corporate subscribers under PECR and legitimate interest. You can opt out at
any time by replying STOP or using unsubscribe links. We do not conduct high■risk profiling.
Cookies & analytics
See our Cookie Policy for details of cookies used and how to manage preferences. We only set non■essential
cookies with consent where required.

Contact

Data Controller: Hsgs Limited, Unit 9b, Albion House, Albion Close, Slough, SL2 5DT. ICO: ZB919127. Email:
payroll@hsgsglobal.co.uk.