Your privacy matters

Privacy Policy

We believe in transparency. Here's how we collect, use, and protect your data across the staffs.id platform.

Last updated: April 23, 2026

Information We Collect

Personal Information

When you register for staffs.id, we collect information such as your name, email address, phone number, and employment details. This information is necessary to provide our HR management services.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, timestamps of clock-ins/outs, and device information.

Company Data

For companies using our platform, we collect organizational data including branch locations, employee records, payroll information, and configuration settings.

How We Use Your Information

Service Delivery

We use your data to provide HR management services including attendance tracking, payroll processing, performance management, and gamification features.

Platform Improvement

Anonymous and aggregated data helps us improve our platform, develop new features, and enhance user experience across all modules.

Communication

We may use your contact information to send service-related notifications, updates, and important announcements about your account or our platform.

Data Protection & Security

Encryption

All data transmitted between your device and our servers is encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256 encryption standards.

Access Controls

We implement role-based access controls (RBAC) ensuring that only authorized personnel can access specific data. Multi-tenancy isolation ensures company data remains separate.

Regular Audits

Our security practices are regularly audited and updated to comply with industry standards and evolving security requirements.

Your Rights

Access & Portability

You have the right to request a copy of your personal data in a structured, commonly used format. Contact your company administrator or our support team.

Correction & Deletion

You can request corrections to inaccurate data or deletion of your personal information, subject to legal retention requirements.

Consent Withdrawal

You may withdraw consent for data processing at any time. Note that this may affect your ability to use certain features of the platform.

Data Sharing & Third Parties

Company Administrators

Your employment data is accessible to authorized administrators within your company as part of HR management operations.

Service Providers

We work with trusted third-party providers for payment processing (Stripe), cloud hosting, and analytics. These providers are bound by strict data protection agreements.

Legal Requirements

We may disclose information when required by law, such as compliance with Malaysian employment regulations, EPF, SOCSO, and tax authorities.

Contact Us

Privacy Inquiries

For any privacy-related questions or requests, please contact our Data Protection Officer at [email protected] or write to us at our registered office address.

Response Time

We aim to respond to all privacy-related inquiries within 14 business days. Complex requests may require additional time, and we will keep you informed of progress.

Have questions about your data?

Our team is here to help you understand how your information is handled.

Contact Privacy Team