Privacy Policy

Last updated: 17 September 2026.

Who we are

myhourspay helps individuals and organisations record working time, manage approvals and prepare reports. Contact support@myhourspay.com.

We are a controller for information used to administer customer accounts, billing, security and support. For organisation-managed work records, the organisation normally determines why and how records are used and we process them on its instructions. Ask your workspace owner about their employment-related uses of your information.

Information we handle

Account details: name, email, profile information, password hash and authentication information.
Workspace records: membership, roles, invitations, clients, projects, working dates and times, breaks, notes, rates, calculated earnings, timesheets and approval history.
Billing information: Stripe customer/subscription references, plan, invoice information and payment status. Stripe handles card payments; never send card details to support.
Support requests, correspondence and information you choose to provide.
Service and security information: IP addresses, session details, usage records, audit events and error logs.
Connected integrations: calendar connection credentials and records you choose to synchronise, export or send to configured webhook recipients.

Information may come from you, your workspace administrator, authorised colleagues, payment providers or integrations you enable. Avoid putting unnecessary sensitive information in notes or support messages.

Purposes and lawful bases

We use necessary account and service information to perform our contract with you. We use billing records to administer payments and meet applicable legal and accounting obligations. Appropriate security, fraud prevention, support and operational processing serves our legitimate interests in operating and protecting the service, balanced against your rights. Where consent is required for optional communications or technologies, you may withdraw it without affecting earlier lawful processing.

For organisation-controlled work records, the organisation identifies its lawful basis and we follow its documented instructions.

Necessary account information is required to create and maintain an account. Optional profile fields and integrations are your choice. Without information needed for a requested function, we may be unable to provide it.

Recipients and workspace access

Workspace members can access records according to their authorised role. Authorised service personnel may access information for support, security or administration. Providers support hosting, storage, email delivery and payments, including Stripe for billing. Connected calendar providers and configured webhook recipients receive information when the relevant integration is used. We may disclose information where legally required or needed to establish or defend legal claims.

International transfers

Providers or integrations may process information outside the UK. Where UK transfer restrictions apply, the relevant lawful mechanism must be established, such as applicable adequacy regulations or approved contractual safeguards with the required assessment. Contact us for information about safeguards.

Cookies and similar technologies

The application uses essential session and security cookies. Our cookie notice describes these and how to review your cookie settings. Promotional emails are optional: uncheck Product tips & offers in your account preferences and save to unsubscribe, or use the unsubscribe link in an email. Operational and security messages are separate.

Retention and deletion

Deleted hours are normally soft-deleted: they are hidden from your records but may remain recoverable until permanently removed. Retention depends on the purpose, the organisation’s instructions where applicable, legal obligations and whether information is needed for a dispute or security investigation. Account deletion is not necessarily immediate erasure of every associated record: organisation records, legally required records and backups may need separate handling.

Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your information, and object to certain processing, including processing based on legitimate interests. You may withdraw consent where it is the basis for processing. These rights have legal conditions and exceptions. Proportionate identity checks may be needed to protect your information.

Contact support@myhourspay.com. For organisation-controlled records, we may refer or forward the request to the responsible organisation. Requests will be handled within the applicable statutory timescales, with any permitted extension explained.

You may complain to the Information Commissioner’s Office. You do not have to contact us first, although we welcome the opportunity to address concerns.

Security and automated processing

We use access controls and other technical and organisational measures appropriate to the service. No service can promise absolute security. Hours and earnings calculations and access rules are automated service functions; customers remain responsible for reviewing work records and employment/pay decisions.

Changes and contact

We will update this notice when practices change and provide appropriate notice of material changes. Privacy questions: support@myhourspay.com.