Privacy policy

Who is responsible

Divaaco Ltd (“we”) operates Hourlify. For information about the people who use your organisation’s account (such as their name and work email) and for this website, we are the controller. For the information your organisation puts into the product (timesheets, projects, clients, invoices and similar), your organisation is the controller and we act as its processor, handling it only on its instructions, as set out in our terms.

Contact: privacy@hourlify.co.uk. ICO registration: ZC275548.

What we collect

• Through this website: the details you send in the contact form (name, email, company and message). If you accept analytics cookies, Google Analytics also records how you use the website: the pages you view and the buttons you click, where you came from, your approximate location (worked out from your IP address), your device and browser type, and a random identifier stored in a cookie. If you reject them, none of this is collected.
• Account details: name, work email, role and the organisation an account belongs to.
• Content your organisation adds: for example timesheet entries, projects, clients, leave, expenses and invoices.
• Billing: handled by Stripe. We receive a customer reference and the status of your subscription, not your card number.
• Messages to us: what you send us when you ask for help, and our replies.
• Technical data: basic data such as IP address and browser type, used to keep the service secure and to investigate problems.

Why we use it

• To provide the service you or your organisation signed up for (contract).
• To reply to your messages, keep the service secure, prevent abuse and improve it (legitimate interests).
• To meet legal, tax and accounting obligations, and to establish, exercise or defend legal claims (legal obligation and legitimate interests).
• To understand how this website is used and improve it, using analytics cookies (your consent, which you can withdraw at any time from “Cookie settings” in the footer).

We do not sell personal data, and we do not use it for advertising.

Who we share it with

We use a small number of providers who process data for us: Stripe (payments), Mailjet (service emails such as invitations, reminders and invoices you send), Netlify (this website and its contact form), and third-party cloud infrastructure providers, such as Amazon Web Services and Google Cloud, which host the service on servers in the UK. We bind them to appropriate terms and only share what they need.

If you accept analytics cookies on this website, Google (Google Analytics) processes the analytics information for us under its data processing terms. We do not use Google’s advertising features.

When you open the Hourlify app, your browser also fetches the app’s typeface (Poppins) directly from Google Fonts, so Google receives your IP address and browser details. We do not send Google anything else.

We may also share personal data with our professional advisers, with regulators and law enforcement where the law requires it, and with a buyer if we sell or reorganise our business (who must protect it as this policy does).

Where it is processed

We host the service in the UK. Some of our providers, such as Stripe, Netlify and Google, may process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum, so that the data stays protected.

How long we keep it

We keep account and organisation data for as long as the account is open. We do not currently delete data automatically when an account is closed, and we may introduce set deletion periods in future; if we do, we will update this policy and tell account administrators. You can ask us at any time to delete your personal data by emailing us, and we will do so within one month unless the law requires or allows us to keep it, for example records we need for tax and accounting purposes or to deal with a legal claim.

Analytics information is kept in Google Analytics for 14 months. The cookie that remembers your choice lasts 6 months.

Your rights

You can ask us for a copy of your personal data, to correct it, to erase it, to restrict or object to how we use it, and to receive it in a portable format. We will answer within one month. We may need to confirm who you are first, and we do not normally charge a fee. For data in your organisation’s account, please also speak to your organisation’s administrator, who decides how it is used. Email privacy@hourlify.co.uk.

If you are unhappy with how we have handled your data, you can complain to us, and you have the right to complain to the Information Commissioner’s Office (ico.org.uk).

Children

Hourlify is for business use by adults. It is not intended for anyone under 18 and we do not knowingly collect their data.

Security

See our security page for the safeguards in the product. No online service can be completely secure, so we also ask you to keep your sign-in details safe.

Changes

If we make material changes to this policy we will update the date above and, for account administrators, tell them before the change takes effect.