Privacy Policy

Last updated: 1st September 2026
 
Smart Payroll Services is dedicated to safeguarding the privacy and integrity of all personal data we handle. This policy outlines our procedures for collecting, utilising, and securing your information when you interact with our digital platforms, reach out to our team, or utilise our specialist HR and payroll solutions.
 
Our firm prioritises ethical data management, ensuring that all processing remains transparent and fully aligned with current UK statutes, specifically the UK General Data Protection Regulation and the Data Protection Act 2018.
 
1. Identity of the Controller
 
Smart Payroll Services delivers expert administrative support and human resources guidance to diverse business entities.
For any enquiries regarding the management of your personal data, please reach out via:
Smart Payroll Services
Email: charlotte@smartpayrollservices.co.uk
 
2. Types of Information Processed
 
Depending on the nature of your engagement with Smart Payroll Services, we may gather the following:
Commercial and Contact Details
- Full name
- Associated business or organisation
- Professional title
- Electronic mail address
- Contact telephone numbers
- Physical business location
- Details shared in general enquiries
 
Employment and Payroll Records
 
When acting on behalf of our clients to provide HR and payroll oversight, we process worker-related data, including:
- Identifying contact information
- Birth dates
- National Insurance identifiers
- Financial account information for payments
- Compensation and wage records
- Statutory tax and NI contributions
- Pension enrolment details
- Annual leave and sickness records
- Statutory benefit information
- Duration of employment and current status
- Necessary administrative data for HR functions
 
Certain HR tasks may require processing sensitive data categories, such as health-related records. We apply rigorous safeguards and specific statutory conditions whenever such data is accessed.
 
3. Data Collection Methods
 
Information is typically acquired through:
- Direct submissions from individuals
- Transmission from your employer
- Appointed legal representatives
- Web-based inquiry forms
- Standard business communications
- Authorised administrative systems provided by clients
- Essential third-party service partners
 
When a client provides employee data for processing, the client typically serves as the primary entity responsible for ensuring individuals receive the necessary privacy notifications.
 
4. Utilisation of Your Information
 
We utilise collected data to:
- Execute payroll cycles
- Offer strategic HR consultation
- Manage statutory employee payments
- Facilitate pension administration
- Foster communication with existing and potential clients
- Address professional enquiries
- Oversee contractual obligations and client accounts
- Generate service proposals and quotes
- Maintain robust financial and business archives
- Administer billing and vendor payments
- Adhere to regulatory mandates
- Protect the integrity of our digital infrastructure
- Resolve service disputes or complaints
- Enhance our service delivery and web experience
 
Processing is only undertaken when a valid legal foundation has been established.
 
5. Legal Framework for Processing
 
We operate under the following legal bases:
- Contractual Necessity: required to deliver agreed-upon services.
- Statutory Compliance: required to meet legal or tax regulations.
- Legitimate Interests: necessary for conducting our business without infringing on individual rights.
- Express Consent: applied when an individual has provided clear permission for a specific use.
 
Additional legal prerequisites are met when handling special category data.
 
6. Role in Payroll and HR Administration
 
In our capacity as a service provider, Smart Payroll Services often acts as a data processor for our clients. The client retains control over the purpose of the data processing, while we operate under their explicit directives.
 
The specific obligations of both Smart Payroll Services and the client are formalized within our service contracts and data processing addendums.
 
7. Data Sharing and Disclosure
 
We never trade or sell personal data to third parties.
To fulfil our service commitments or legal duties, information may be shared with:
- HM Revenue & Customs
- Pension fund administrators
- Regulatory authorities
- Specialised HR and payroll software vendors
- Secure cloud and hosting providers
- External professional consultants (legal, insurance, accounting)
- Financial payment processors
- Authorised client stakeholders
 
We ensure all third-party processors adhere to stringent data protection standards through comprehensive vetting and agreements.
 
8. Cross-Border Data Transfers
 
Certain technology partners may host data in locations outside the UK. In these instances, we implement all necessary legal protections and safeguards to ensure your data remains secure and compliant with UK legislation.
 
9. Security Protocols
 
We employ multi-layered technical and organisational strategies to defend against:
- Unauthorised system entry
- Data loss or theft
- Improper disclosure
- Deletion or corruption
 
Access is strictly limited to authorised personnel with a legitimate business need. While we strive for maximum security, no digital transmission method is entirely immune to risk.
 
10. Data Retention Policy
 
Information is kept only for the duration required to satisfy the original purpose for collection, including legal, tax, or reporting requirements. Retention periods are defined by the data type and regulatory landscape. Once obsolete, data is securely purged or anonymised.
 
11. Web Technologies and Cookies
 
Our digital platform utilizes cookies to optimize functionality and analyse user traffic. You can adjust your preferences via your browser; however, limiting cookies may impact site performance.
 
12. Individual Rights
 
Under UK law, you possess rights to:
- Access your personal records
- Correct inaccurate data
- Erase data under specific conditions
- Restrict or object to certain processing activities
- Obtain a portable copy of your data
- Revoke previously given consent
 
Please contact us to exercise these rights. Some requests may be redirected to your employer if we are acting solely as their data processor.
 
13. Resolution of Concerns
 
If you have a grievance regarding our data practices, please contact Smart Payroll Services first so we can address your concerns. You also maintain the right to escalate matters to the Information Commissioner’s Office (ICO).
 
14. Policy Revisions
 
We periodically update this statement to reflect new service offerings or legislative changes. The most recent version is always available here, indicated by the effective date.
 
15. Contact Information
 
For enquiries regarding this policy or our privacy practices, contact:

Smart Payroll Services

Email: charlotte@smartpayrollservices.co.uk