Last Updated: 8th September 2025
This Privacy Policy explains how Payrollly (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit payrollly.co.uk or contact us.
Controller: Payrollly
Website: https://payrollly.co.uk
Email: info@payrollly.co.uk
Address: New Broad Street House, 35 New Broad Street, London, England, EC2M 1NH
We operate in the United Kingdom and process personal data in accordance with the UK GDPR and the Data Protection Act 2018.
This Policy covers personal data we process when you:
visit or interact with our website; and/or
contact us via our website contact form, by email, or by phone.
If you become a client, additional processing relevant to service delivery will be described in your engagement letter or a separate privacy notice.
When you submit our Contact Form, we collect:
Name
Phone
Company Name
Message (free-text information you choose to provide)
If you contact us by email or phone, we will process the information contained in that communication (e.g., your email address, phone number, name, and any details you include).
When you access the website, we may automatically collect limited technical information such as:
IP address, device identifiers, browser type/version, operating system, time zone, and language;
pages viewed, referring pages, and the time/date of visits;
cookie-related information.
(See Cookies below for more details.)
We do not use automated decision-making or profiling that produces legal or similarly significant effects about you.
We use your personal data to:
respond to your enquiries and provide information you request;
schedule calls/meetings and manage our relationship with you;
operate, secure, and improve our website (including troubleshooting, analytics, and usage monitoring);
comply with legal and regulatory obligations; and
(with your consent, where required) send you updates or marketing communications.
We rely on one or more of the following lawful bases under the UK GDPR:
Legitimate interests – e.g., to respond to enquiries, run and protect our website, and grow our business (we balance these interests against your rights and expectations);
Consent – e.g., for certain marketing communications and non-essential cookies (you can withdraw consent at any time);
Contract – to take steps at your request before entering into a contract or to perform a contract with you;
Legal obligation – where processing is necessary to comply with laws and regulations.
We may share personal data with:
Service providers who help us operate our business and website (e.g., hosting, email and productivity tools, IT support, website analytics, and form processing). These providers act under contracts that require them to protect your data.
Professional advisers (e.g., accountants, auditors, legal advisers) and regulators where necessary.
Successors in the event of a business reorganisation, merger, or similar transaction.
We do not sell your personal data.
Some service providers may process data outside the UK/EEA. Where such transfers occur, we ensure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses (with the UK addendum/IDTA as applicable).
We keep personal data only for as long as necessary for the purposes set out in this Policy, including to meet legal, accounting, or reporting requirements. Typical retention periods are:
Enquiry records (contact form, emails): up to 24 months from our last interaction, unless you become a client or we need to retain the information to resolve a dispute.
Client/contractual records: generally six (6) years after the end of the relationship, or longer if required by law.
Cookie data: as described in our Cookie Policy and/or your browser settings.
We may retain anonymised or aggregated data for longer.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission over the internet is 100% secure, but we continuously aim to maintain a level of security appropriate to the risk.
Under UK data protection law, you have rights which may include:
Access – to obtain a copy of your personal data;
Rectification – to correct inaccurate or incomplete data;
Erasure – to request deletion of your data in certain circumstances;
Restriction – to ask us to limit processing in certain cases;
Portability – to receive certain data in a structured, commonly used, machine-readable format;
Objection – to processing based on legitimate interests or for direct marketing;
Withdraw consent – where processing is based on consent.
To exercise any of these rights, contact us at info@payrollly.co.uk. We may need to verify your identity. If we cannot resolve your concern, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
Our website may use cookies and similar technologies to function correctly and (with your consent, where required) to understand how the site is used and to improve it. You can manage your preferences via your browser settings and, if provided, our cookie banner or Cookie Policy page.
Our website may include links to third‑party sites. Those sites have their own privacy policies. We are not responsible for their content or privacy practices.
Our website is not directed to children and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.
Payrollly
New Broad Street House, 35 New Broad Street, London, England, EC2M 1NH
Email: info@payrollly.co.uk
We may update this Privacy Policy from time to time. The latest version will be posted on payrollly.co.uk with an updated effective date.
Note: This Policy is intended to reflect our current website-related processing. If our services or technology stack changes (e.g., new analytics or marketing tools), this Policy and our cookie disclosures should be updated accordingly.