← Legal & Compliance

Individual privacy notice

Last updated:

At a glance

This summary sets out the key points of this Notice. The full detail is in the sections that follow.

  • This Notice is for the people we pay and employ. It explains how your personal, employment, tax and payment information is handled when you are employed, engaged or paid through Native Teams, or when you use the Platform in your own name.
  • We are primarily a processor. When a business uses our Platform to run its payroll, manage its people or pay you, that business decides how your information is used, and Native Teams processes it on the business's behalf and in line with its instructions.
  • We are a controller only in limited situations. These are where a Native Teams company is your legal employer or engages you directly, for the obligations it has in that role, where the law places obligations directly on us, and where you use our services in your own name.
  • Your information is used to employ and pay you correctly. This includes calculating your pay, deducting tax and social security, paying you, administering your benefits and leave, and meeting legal obligations in the country where you work.
  • We protect sensitive information with extra care. Information such as health details or identity documents is collected only where necessary and is accessible only to those who need it.
  • People make the decisions that matter. We do not make decisions that significantly affect you, such as decisions about your pay or your account, using automated means alone.
  • You have rights over your information. You can access it, correct it, and in some cases ask for it to be deleted or object to its use, and we will help you exercise those rights.

About this Notice

Native Teams helps businesses employ and pay people around the world, and helps individuals work and get paid wherever they are. This Individual Privacy Notice explains how personal information is handled for the people who are employed, engaged, onboarded or paid through Native Teams, and for individuals who use our Platform in their own name.

Because the information involved in employment and payroll is often sensitive, we have written this Notice to explain clearly what information is used, why it is used, who is responsible for it, who it is shared with, how long it is kept, and what rights you have. This Notice should be read together with our Privacy Policy, which explains how we handle personal information more generally, and our Cookie Policy.

In this Notice, "Native Teams", "we", "us" and "our" refer to Native Teams Limited and, where relevant, the other companies in the Native Teams group. The "Platform" means the Native Teams web application and mobile applications.

Who is responsible for your information

Data protection law distinguishes between a controller, which decides why and how personal information is used and is responsible for it, and a processor, which handles personal information on behalf of a controller and in accordance with its instructions. Understanding which role Native Teams plays helps you know who is responsible for your information and who to contact about it.

We are primarily a processor

Most of the personal information on the Native Teams Platform is provided by our business clients and the people they work with, and is used to deliver the services those clients have chosen. When a business uses our Platform to run its payroll, manage its people, pay its contractors or gig workers, or administer its own entity, that business is the controller of the personal information involved. Native Teams acts as its processor, which means that we handle your information on the business's behalf, in accordance with its instructions and our Data Processing Agreement with it, and for no other purpose.

In these situations, the business's own privacy notice explains how your information is used. If you have a question about your information or would like to exercise your rights, please contact the business first. If you contact us, we will pass your request to the business where appropriate and help it to respond.

When we act as a controller

In some situations, Native Teams decides for itself why and how your personal information is used, and is therefore a controller. These situations are limited, and they are the following:

  • where a company in the Native Teams group acts as your legal employer under our Employer of Record service, in which case that company is responsible, as required by employment, tax and social security laws, for the personal information it needs to fulfil its obligations as your employer;
  • where a company in the Native Teams group engages you under our Contractor of Record service, in which case that company is responsible for the personal information it must process to meet its own legal obligations as the contracting party;
  • where we carry out identity verification, anti-money laundering, sanctions and fraud prevention checks, keep records of payments made through our Platform, and meet other obligations that the law places on us directly; and
  • where you use the Platform in your own name rather than through a business, for example as a freelancer, or where you hold a wallet or card with us.

Where a Native Teams company is your legal employer, the business you work for still decides matters such as your role and the work you do, and it remains responsible for its own use of the information it receives about you, as explained in its privacy notice.

The table below summarises our role in the most common situations.

Your situationOur roleWho to contact about your information
A business runs its payroll for you through our Global Payroll serviceProcessorThe business you work for, as controller. We will support it in responding to you.
A business pays you as a contractor or gig worker through our PlatformProcessor, and controller only for the checks and payment records the law requires of usThe business that engaged you, as controller. We will support it in responding to you.
You are employed by a Native Teams group company under our Employer of Record serviceController, for obligations as legal employerNative Teams.
You are engaged by a Native Teams group company under our Contractor of Record serviceController, for obligations as the contracting partyNative Teams.
You use the Platform in your own name, for example as a freelancer, or you hold a wallet or card with usControllerNative Teams.

The information we collect

The information we collect depends on your situation and the services involved. We collect only the information that is needed for the relevant purpose. The table below describes the main categories.

CategoryExamples
Identity informationYour full name, date of birth, gender where required by local law, nationality, photograph, and copies of your passport, national identity card or other identity documents.
Contact informationYour home address, personal and work email addresses, telephone number and emergency contact details.
Employment or engagement informationYour job title, role description, start and end dates, working hours, place of work, employment contract or contractor agreement, probation details, and the business you work for.
Pay and compensation informationYour salary or fees, bonuses, commissions, allowances, overtime, expenses, salary history, invoices and payslips.
Tax and social security informationYour tax identification number, tax code or residency status, social security or national insurance number, and information needed for tax and social security filings.
Bank and payment informationYour bank account details, payment preferences, wallet balances, card details and transaction history.
Right-to-work and immigration informationVisa and work permit details, residence status, and the documents needed to confirm your right to work in the relevant country.
Leave and absence informationHoliday requests and balances, and records of sick leave, parental leave and other types of leave.
Benefits and dependants informationInformation needed to provide pension, health insurance and other benefits, including details of your dependants or beneficiaries where you provide them.
Verification informationThe results of identity verification, sanctions screening and fraud prevention checks, including a selfie or liveness check where this forms part of identity verification.
Account and technical informationYour login details, account settings, device and browser information, IP address and records of how you use the Platform.
CommunicationsMessages and emails you exchange with us, support requests and your feedback.

Where we get your information

Most of the information we hold comes directly from you, for example when you complete your onboarding, upload documents, submit leave requests or contact us. We also receive information from the business you work for, such as your role, start date and compensation, and from other sources where necessary, including your previous payroll provider when payroll is transferred to us, government authorities, identity verification and screening providers, benefits and pension providers, and our banking and payment partners.

Sensitive information

Some of the information involved in employment is particularly sensitive. Data protection law calls it special category information, and it includes information about your health, ethnic origin, religious beliefs, trade union membership and sexual orientation. Information about criminal convictions is also subject to special protection.

We collect and use sensitive information only where it is necessary and permitted by law. The most common examples are health information needed to administer sick leave, statutory sick pay, parental leave or workplace adjustments, and trade union membership where union dues are deducted from your pay. In some countries, the law requires employers to record other information, such as religious affiliation for church tax purposes. We process criminal record information only where the law permits a background check for the role concerned and you have been informed about it.

Where Native Teams acts as a processor, the business you work for decides whether sensitive information is needed, and it is responsible for the lawfulness of that decision. Where a Native Teams company is your legal employer, it processes sensitive information only as employment, tax and social security laws require. In every case, sensitive information is protected by restricted access and the additional safeguards described in this Notice.

How we use your information and why

Your information is used only where there is a lawful reason to do so. Where Native Teams acts as a processor, the business you work for determines the purposes for which your information is used and the legal basis for each of them, and we act on its instructions. The table below describes the main purposes and the legal bases on which Native Teams relies where it is the controller, including where a Native Teams company is your legal employer.

PurposeLegal basis
To onboard you, prepare your employment contract or contractor agreement, and manage your employment or engagement.Performance of your employment contract or contractor agreement, and compliance with employment law.
To calculate your pay, deduct tax and social security contributions, produce your payslips and make statutory filings.Performance of your contract and compliance with tax and social security laws.
To pay you, process your expenses and, where you use them, provide your wallet, card and currency conversion services.Performance of your contract.
To administer your leave, benefits and pension.Performance of your contract and compliance with employment law, and for sensitive information, the conditions for employment and social security purposes.
To confirm your identity and right to work, and to carry out anti-money laundering, sanctions and fraud prevention checks.Compliance with legal obligations, and our legitimate interest in preventing fraud and financial crime.
To provide support, answer your questions and send you important information about your account and your employment.Performance of your contract and our legitimate interest in supporting the people we work with.
To share the information the business you work for needs in order to direct your work and pay for our services.Performance of our contract with that business and our legitimate interest in providing our services, balanced against your rights.
To keep the Platform secure and to protect you, our clients and Native Teams.Our legitimate interest in maintaining a safe and secure service, and compliance with legal obligations.
To respond to requests from authorities, and to establish, exercise or defend legal claims.Compliance with legal obligations and our legitimate interest in protecting our rights.

Where Native Teams relies on its legitimate interests as a controller, we have considered whether those interests are outweighed by your rights and freedoms, and you have the right to object. Where we rely on your consent, for example to send you optional information about our services, you can withdraw your consent at any time.

Automated decisions and artificial intelligence

Our commitments

  • Your pay is calculated by rules, not by AI. Salaries, taxes and statutory contributions are calculated by our rules-based payroll systems in line with the law and the information provided, and our specialists remain responsible for the results.
  • People make the decisions that matter. We do not make decisions that have legal or similarly significant effects on you, such as decisions about your employment, your pay or your account, using automated means alone.
  • Automated checks are reviewed by people. Identity verification and screening checks are carried out with the help of automated tools. Where a check raises a concern, a member of our compliance team reviews it before any decision is made.
  • You can ask for a human review. If you believe a decision affecting you has involved automated processing, you can ask us to explain it, have it reviewed by a person, and give your point of view.

Our Responsible AI Policy explains in more detail where we use artificial intelligence and where we do not.

Who we share your information with

Where Native Teams acts as a processor, we share your information only as the business you work for instructs, or as the law requires. Where we act as a controller, we share it only where necessary for the purposes described in this Notice. In every case, recipients are required to protect your information, and we never sell it. Depending on your situation, the recipients may include the following:

  • The business you work for. Where you work for one of our clients, the business has access to the information it needs to direct your work, approve your leave and expenses, and understand the cost of your employment or engagement, such as your name, role, working arrangements and pay. We do not share your health information or other sensitive information with the business unless this is necessary and permitted by law, for example to confirm that you are absent due to illness.
  • Government authorities. Tax authorities, social security and pension bodies, immigration authorities and other public bodies, where the law requires us to report information or make payments on your behalf.
  • Benefits, insurance and pension providers. The providers of the benefits you are enrolled in, so that they can provide those benefits to you.
  • Banks, payment institutions and card issuers. Our regulated partners, which process your salary and other payments and, where you use them, provide your wallet and card services.
  • Local partners and advisers. Payroll specialists, immigration advisers, lawyers and accountants who help us provide services in a particular country.
  • Service providers. Providers of cloud hosting, identity verification, electronic signature, communication and support tools, which process your information on our behalf and under our instructions.
  • Companies in the Native Teams group. Our group companies, which help us provide services in the countries where they operate.
  • Professional advisers, auditors and insurers, where necessary for the operation of our business, and a buyer or successor if all or part of our business is reorganised or sold, subject to the same protections.

International transfers

Because Native Teams supports people working across borders, your information may be transferred to, stored in or accessed from countries other than the one in which you live or work. For example, information may be shared with the business you work for in another country, or stored with a service provider in another region.

Whenever your information is transferred internationally, we make sure it is protected. We rely on decisions that the destination country provides an adequate level of protection, or on recognised safeguards such as the standard contractual clauses approved by the European Commission and the International Data Transfer Addendum approved in the United Kingdom, together with additional measures where appropriate.

How long we keep your information

Where the business you work for is the controller, it decides how long your information is kept, subject to the minimum periods set by law, and Native Teams keeps it in accordance with the business's instructions. Where Native Teams is the controller, we keep your information only for as long as it is needed for the purposes described in this Notice, including to meet our legal obligations. Employment, payroll and tax laws in many countries require employers and payroll providers to keep records for a number of years after employment ends. When we no longer need your information, we delete or anonymise it securely. The table below sets out the general criteria we apply.

Type of informationHow long we keep it
Employment and engagement recordsFor the duration of your employment or engagement, and afterwards for the period required by employment law in the relevant country and to deal with any legal claims.
Payroll, tax and social security recordsFor the period required by tax and social security laws in the relevant country, which is often several years after the end of the tax year concerned.
Right-to-work and immigration recordsFor the period required by immigration law in the relevant country, usually for a set period after your employment ends.
Verification and anti-money laundering recordsFor the period required by anti-money laundering laws, which is usually at least five years after the end of the relationship.
Wallet, card and payment recordsFor the period required by financial regulations and our regulated partners.
Information about people who do not complete onboardingFor a limited period after onboarding stops, unless we need to keep it longer to meet a legal obligation.

How we protect your information

We use appropriate technical and organisational measures to protect your information, including encryption in transit and at rest, role-based access controls, multi-factor authentication, monitoring of our systems and regular security testing. Sensitive information, such as identity documents, health information and bank details, is subject to additional restrictions, so that only the people who need it to do their jobs can access it.

Everyone at Native Teams who works with personal information is bound by confidentiality obligations and receives training in data protection and security. If a personal data breach occurs that is likely to result in a high risk to you, you will be told without undue delay.

You can help protect your information by keeping your login details private, enabling multi-factor authentication, and contacting us immediately if you believe your account has been compromised.

Your rights

You have rights over your personal information. Some of them apply only in certain circumstances, and some may be limited by laws that require employment, payroll and tax records to be kept. The table below explains your main rights.

Your rightWhat it means
Right of accessYou can ask for a copy of your personal information and information about how it is used. Many documents, such as your payslips and contract, are also available to you in the Platform.
Right to rectificationYou can ask for inaccurate information to be corrected and incomplete information to be completed. You can update many details yourself in the Platform.
Right to erasureYou can ask for your information to be deleted where there is no longer a valid reason to keep it. This right is often limited by the legal obligation to keep employment, payroll and tax records.
Right to restrictionYou can ask for the use of your information to be limited, for example while its accuracy is being checked.
Right to objectYou can object to the use of your information where it is based on legitimate interests, and to direct marketing at any time.
Right to data portabilityYou can ask to receive information you have provided in a structured, commonly used and machine-readable format, or to have it transferred to another organisation.
Rights about automated decisionsYou can ask for a person to review a decision with legal or similarly significant effects that has been made by automated means, give your point of view and contest the decision.
Right to withdraw consentWhere your information is used on the basis of your consent, you can withdraw it at any time.

Where Native Teams is the controller of your information, including where a Native Teams company is your legal employer or engaged you under our Contractor of Record service, you can exercise your rights by contacting us as described at the end of this Notice. Where Native Teams acts as a processor, please contact the business you work for, and we will help it to respond to your request. We may need to verify your identity before responding, and we will usually respond within one month. If your request is complex, we may extend this period where the law allows, and we will let you know.

Keeping your information up to date

It is important that the information we hold about you is accurate, because it is used to pay you correctly and to meet legal obligations on your behalf. Please keep your details up to date in the Platform, and tell us or the business you work for promptly about any change, such as a new address, new bank details or a change in your tax or residence status. If you provide information about other people, such as your dependants or emergency contacts, please make sure they are aware that you have shared it.

Complaints

If you are unhappy with how your information has been handled, please contact us or, where Native Teams acts as a processor, the business you work for, so that the matter can be put right. We will acknowledge your complaint promptly, investigate it, and tell you the outcome without undue delay.

You also have the right to complain to a data protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office. If you live or work in another country, you can contact the data protection authority in that country.

Changes to this Notice

We may update this Notice from time to time to reflect changes in our services, our practices or the law. The date at the top of this Notice shows when it was last updated. If we make significant changes, we will let you know through the Platform or by email before the changes take effect.

How to contact us

If you have any questions about this Notice or how your information is handled, or if you would like to exercise any of your rights where Native Teams is the controller, please contact us by email at legal@nteams.com. For questions about your account, you can contact our support team at support@nteams.com or through the Platform.