Privacy policy framework
A launch-ready structure for explaining how duoHR collects, uses, shares, retains and protects website and service data.
Last structured: 6 August 2026Status of this document
This is a professionally structured placeholder policy for a new product website. It must be reviewed and approved by qualified legal counsel against the final legal entity, product architecture, data flows, hosting, subprocessors, retention practices and applicable law before publication.
Information collected
The website may collect contact and business information submitted through forms, technical and device information, consent preferences and marketing attribution. The production service may process employee and workforce data on behalf of customer organisations under a separate agreement.
Purposes of use
Information may be used to respond to enquiries, provide requested demonstrations, operate and secure the service, support customers, improve product experience, comply with legal obligations and send communications where permitted.
Sharing and subprocessors
Information may be shared with authorised service providers for hosting, security, communications, analytics, customer support and related operations under appropriate contractual controls. A verified subprocessor list should be published before launch.
Retention and rights
Retention periods should be defined by purpose, contract and law. The final policy should explain applicable access, correction, deletion, grievance, consent-withdrawal and other rights, along with a verified contact process.
Security and international processing
The final policy should accurately describe technical and organisational measures, hosting locations, transfer mechanisms and incident processes without overstating assurance.
Contact
Replace this section with the approved privacy contact, grievance contact, legal entity address and response process.