Privacy Notice

1. Introduction

This privacy notice outlines how DEC Umbrella, operating under The DEC Group Ltd (referred to as "we," "us," or "our"), collects, uses, and protects the personal data of our clients and their employees. The registered address of The DEC Group Ltd is Unit 25, First Floor, Doulton Trading Estate, Doulton Road, Rowley Regis, West Midlands, United Kingdom, B65 8JQ.

2. Personal Data We Collect

We may collect the following personal data:

  • Client Information: Name, contact details, and payment information.

  • Employee Information: Name, contact details, National Insurance number, tax code, bank account details, and any other information necessary for payroll processing.

3. How We Use Personal Data

We use the collected personal data for the following purposes:

  • Payroll Processing: To calculate and distribute wages, deduct taxes and national insurance contributions, and prepare payslips.

  • Compliance: To report to HM Revenue & Customs (HMRC) and comply with employment law and regulations.

  • Communication: To communicate with clients regarding payroll services and updates.

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Contractual Necessity: To fulfill our contractual obligations to our clients.

  • Legal Obligation: To comply with legal and regulatory requirements.

  • Legitimate Interests: To manage our business operations effectively.

5. Data Sharing

We may share personal data with:

  • HMRC: For tax and national insurance reporting purposes.

  • Third-Party Service Providers: Who assist us in providing payroll services (e.g., payroll software providers).

  • Legal Authorities: If required by law or to protect our legal rights.

6. Data Security

We take data security seriously and implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law. After this period, personal data will be securely deleted or anonymized.

8. Data Subject Rights

Individuals have the following rights regarding their personal data:

  • Access: The right to request access to their personal data.

  • Rectification: The right to request correction of inaccurate or incomplete data.

  • Erasure: The right to request deletion of personal data, subject to legal obligations.

  • Restriction: The right to request restriction of processing of personal data.

  • Objection: The right to object to the processing of personal data.

  • Portability: The right to request transfer of personal data to another organization.

9. Contact Information

If you have any questions or concerns about this privacy notice or our data processing practices, please contact us at:

  • Email: [contact@example.com]

  • Phone: [Phone Number]

10. Changes to This Privacy Notice

We may update this privacy notice from time to time. Any changes will be posted on our website, and, where appropriate, notified to clients by email.