Privacy Policy
Introduction
This Privacy Policy explains how 5 Star Desi Payroll (collects, uses, shares, and protects personal data. We comply with UK GDPR and the Data Protection Act2018. We act as a Data Controller for client and prospect data processed for sales/marketing and servicedelivery.
Data we collect
• Identity & Contact: name, email, phone, job title, company name, postal address. • Business & Payroll:employee names, hours, pay rates, National Insurance numbers, tax codes, CIS status, UTRs, VAT numbers,invoices, bank details provided for payments. • Technical: IP address, device/browser info, cookies/analyticsevents. • Communications: emails, call notes, support tickets, uploaded documents
How we use data (lawful bases)
• Provide services (Contract): run payroll, generate payslips, submit RTI/CIS/VAT, process payments viabanking partners. • Compliance (Legal Obligation): AML/CTF checks; HMRC reporting; record keeping. •Legitimate Interests: business development, service improvement, fraud prevention, analytics. • Consent:marketing emails/texts where required; certain cookies/analytics where required.
Sharing data
We may share data with: (i) HMRC and UK regulators; (ii) banking/payment partners; (iii) accountants/professional advisers; (iv) vetted IT vendors (hosting, backups, email, analytics, ticketing). All vendors arebound by contracts and confidentiality. We do not sell personal data.
International transfers
Where suppliers host or process data outside the UK, we use approved safeguards (e.g., UK IDTA or SCCs)and conduct transfer risk assessments.
Retention
We keep records for as long as necessary for the purpose collected: typically payroll/tax records for 6 yearsafter the tax year; marketing leads for up to 24 months from last interaction; support records for 24 months;CCTV/telephony (if used) per policy. We securely delete/anonymise when no longer needed.
Your rights
Individuals may have rights to access, rectification, erasure, restriction, portability, and to object. To exerciserights, email. You can complain to the ICO at ico.org.uk if you are unhappy with ourhandling of data.
Security
We implement access controls, encryption in transit, MFA where available, regular updates/patching, andvendor due diligence. Data is stored in reputable UK/EU data centres where possible.
Marketing
We may send B2B marketing to corporate subscribers under PECR and legitimate interest. You can opt out atany time by replying STOP or using unsubscribe links. We do not conduct high■risk profiling.Cookies & analyticsSee our Cookie Policy for details of cookies used and how to manage preferences. We only set non■essentialcookies with consent where required.
Contact
Data Controller: Email: 5stardesipay@gmail.com address 12 Bond Street Mayfiar London W1S 4PW