← Legal & Compliance

Privacy policy

Last updated:

At a glance

This summary sets out the key points of how we handle your personal information. The full detail is in the sections that follow.

  • We act on our clients' instructions. When businesses use our Platform to manage and pay their people, they decide how that information is used, and we process it on their behalf and only as they instruct.
  • We collect only what we need. Where we decide how information is used ourselves, for example for our website, our customer relationships and our legal obligations, we use only what is necessary.
  • We never sell your personal information. We share it only with the people and organisations who need it to help us provide our services, and only under strict safeguards.
  • We protect your information. We use recognised security measures, including encryption and access controls, and we require the same high standards from our providers.
  • People make the important decisions. We do not make decisions with legal or similarly significant effects on you using automated means alone.
  • You are in control. You can access, correct or delete your information, object to certain uses, and unsubscribe from marketing at any time.
  • We are here to help. If you have a question or concern, you can contact us at any time, as explained at the end of this Policy.

About this Policy

At Native Teams, we help businesses employ, pay and manage people across borders, and we help individuals work and get paid wherever they are. To do this, we need to handle personal information, and we understand that you trust us to handle it with care. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, who we share it with, and the choices and rights you have.

We have written this Policy to be as clear and easy to read as possible. If anything is unclear, or if you would like more information about a particular topic, please contact us using the details in the section headed "How to contact us".

Who we are

Native Teams Limited is a company incorporated in England and Wales with company number 12584623, and is registered with the UK Information Commissioner's Office under registration number ZB325570. In this Policy, "Native Teams", "we", "us" and "our" refer to Native Teams Limited and, where relevant, the other companies in the Native Teams group.

Our role: processor and controller

Data protection law distinguishes between a controller, which decides why and how personal information is used, and a processor, which handles personal information on behalf of a controller and in line with its instructions. Understanding which role we play helps you know who is responsible for your information and who to contact about it.

We are primarily a processor

Most of the personal information on the Native Teams Platform is provided by our business clients and the people they work with, and is used to deliver the services those clients have chosen. When a business uses our Platform to run payroll, manage its people, pay its contractors or gig workers, or administer its own entity, that business is the controller of the personal information involved. Native Teams acts as its processor, which means that we handle the information on the client's behalf, in accordance with its instructions and our Data Processing Agreement with it, and for no other purpose.

In these situations, the client's own privacy notice explains how your personal information is used. If you are an employee, contractor or other individual whose information has been added to our Platform by a business, and you have a question about your information or would like to exercise your rights, please contact that business first. If you contact us, we will pass your request to the business, where appropriate, and help it to respond.

When we act as a controller

In some situations, we decide for ourselves why and how personal information is used, and we are therefore a controller. These situations are limited, and this Policy explains how we handle personal information in each of them. They include the following:

  • when you visit our website, read our content or use our free tools and calculators;
  • when we manage our relationship with our business clients, partners and suppliers, including the contact details of their representatives, account administration, billing and support;
  • when you create an account in your own name, for example under one of our plans for individuals;
  • when we carry out identity verification, anti-money laundering, sanctions and fraud prevention checks, keep financial records, and meet other obligations that the law places on us directly;
  • when we send marketing communications and organise events; and
  • where a company in the Native Teams group acts as the legal employer of a person under our Employer of Record service, in which case that company is responsible, as required by employment, tax and social security laws, for the personal information it needs to fulfil its obligations as employer.

The table below summarises our role in the most common situations.

SituationOur roleWho to contact about your information
A business uses our Platform for payroll, HR, contractor or gig payments, or entity managementProcessorThe business, as controller. We will support it in responding to you.
You visit our website or use our free toolsControllerNative Teams.
You represent a business client, partner or supplier in its relationship with usControllerNative Teams.
You use the Platform in your own name, for example as a freelancerControllerNative Teams.
We carry out checks and keep records that the law requires of usControllerNative Teams.
You are employed by a Native Teams group company under our Employer of Record serviceController, for obligations as legal employerNative Teams, as explained in our Individual Privacy Notice.

Who this Policy applies to

This Policy applies where Native Teams acts as a controller, as described in the previous section. The table below explains which other documents you may also wish to read, depending on how you interact with us.

If you are...This Policy applies to...Please also read...
A visitor to our websiteInformation collected when you browse our website, read our content or use our free tools and calculators.Our Cookie Policy.
A representative of a business client, partner or supplierInformation about you as a contact person, account administrator or user of the Platform on behalf of your organisation.Our General terms of use and, for business clients, our Data Processing Agreement.
A freelancer or individual using our plans for individualsInformation we collect when you create and use your account.Our Individual Privacy Notice and Terms of Service for Individuals.
A person employed, engaged or paid through Native TeamsGeneral information about how we operate as a business.Our Individual Privacy Notice, which explains in detail how we handle your personal, employment, tax and payment information.
A job applicant to Native TeamsGeneral information about how we operate as a business.The privacy notice provided to you when you apply for a role with us.

This Policy does not apply to personal information that we process as a processor on behalf of our business clients. That processing is governed by the instructions of the client concerned, its own privacy notice and our Data Processing Agreement with it.

The personal information we collect

The personal information we collect as a controller depends on how you interact with us and which of our services you use. We collect it in three main ways: directly from you, automatically when you use our website and Platform, and from third parties. The table below summarises the main categories.

CategoryExamplesHow we obtain it
Identity informationYour name, job title, date of birth, nationality, and identity documents where verification is required.From you, or from the organisation you represent.
Contact informationYour email address, telephone number and postal or business address.From you, or from the organisation you represent.
Account and profile informationYour login details, account settings, preferences, permissions and the organisation you are linked to.From you, and generated when you use the Platform.
Verification and compliance informationInformation needed for know-your-customer, anti-money laundering, sanctions and fraud checks, such as identity documents, proof of address and company ownership details.From you, and from identity verification, screening and public register providers.
Financial and transaction informationBank account details, payment card details, invoices, payment history, wallet balances and currency conversions.From you, from your organisation and from our payment partners.
CommunicationsMessages, emails, call recordings where you have been informed, support requests, feedback and survey responses.From you, when you contact us or we contact you.
Technical and usage informationYour IP address, device and browser type, operating system, pages visited, features used, log data and approximate location derived from your IP address.Automatically, through cookies and similar technologies.
Marketing informationYour marketing preferences, your interactions with our emails and events, and information about your business interests.From you, from our website, and from business information providers.

We do not intentionally collect special category information, such as information about your health, ethnic origin or religious beliefs, through our website or in the course of our business relationship with you. Where we need to process such information to provide a service, for example to administer sick leave for a person we employ, we explain this in our Individual Privacy Notice and process it only where the law allows.

If you provide us with personal information about another person, such as a colleague you invite to the Platform, please make sure that you are entitled to do so and that the person is aware of this Policy.

How we use your personal information

We use your personal information only where we have a lawful reason to do so. The table below explains the main purposes for which we use personal information and the legal basis on which we rely for each of them.

Why we use your informationOur legal basis
To create and manage your account, provide our services, and carry out the agreement between you or your organisation and us.Performance of a contract, or our legitimate interest in providing our services to the organisation you represent.
To verify identities and carry out anti-money laundering, sanctions, fraud prevention and other compliance checks.Compliance with legal obligations, and our legitimate interest in preventing fraud and financial crime.
To process payments, issue invoices, collect amounts due and keep financial records.Performance of a contract and compliance with legal obligations.
To provide customer support and respond to your questions, requests and complaints.Performance of a contract and our legitimate interest in supporting our customers.
To keep our website and Platform secure, detect and prevent misuse, and protect our customers and their people.Our legitimate interest in maintaining a safe and secure service, and compliance with legal obligations.
To analyse how our website and Platform are used, and to develop and improve our products and services.Our legitimate interest in improving our services, and your consent where required for non-essential cookies.
To send you service messages, such as updates about your account, changes to our terms and security notices.Performance of a contract and compliance with legal obligations.
To send you marketing communications and invite you to events.Your consent, or our legitimate interest in promoting our services to business contacts where the law allows.
To comply with our legal and regulatory obligations, respond to requests from authorities, and establish, exercise or defend legal claims.Compliance with legal obligations and our legitimate interest in protecting our rights.

Where we rely on our legitimate interests, we have balanced those interests against your rights and freedoms, and we only proceed where we are satisfied that your interests do not override ours. You can ask us for more information about this assessment, and you have the right to object to processing that is based on legitimate interests.

Where we rely on your consent, you can withdraw it at any time. Withdrawing your consent does not affect the lawfulness of any processing that took place before you withdrew it.

Cookies and similar technologies

We use cookies and similar technologies on our website and Platform. Some of them are strictly necessary for the website and Platform to work, while others help us understand how our services are used, remember your preferences or measure the effectiveness of our marketing. We only use non-essential cookies where you have agreed to them, and you can change your choices at any time through the cookie settings on our website. Our Cookie Policy explains this in more detail.

Marketing communications

We would like to keep you informed about our services, new features, events and content that may be of interest to you. We send marketing communications only where you have agreed to receive them or where the law otherwise allows us to do so, for example where you are a business contact and our communications are relevant to your role.

You can unsubscribe from marketing communications at any time by using the unsubscribe link in any marketing email, by changing your preferences in the Platform, or by contacting us. Even if you unsubscribe from marketing, we will continue to send you service messages that are necessary for the use of your account.

Artificial intelligence and automated decisions

We use artificial intelligence in limited and clearly defined ways, for example to help our team respond to enquiries, to help you find information, and to help detect unusual activity on our Platform. Our Responsible AI Policy explains where we use AI, where we do not, and the safeguards we apply.

Our commitments on automated decisions

  • We do not make decisions that have legal or similarly significant effects on you, such as refusing or closing an account, using automated means alone. A member of our team reviews any such decision.
  • Some of our compliance checks, such as identity verification and sanctions screening, are carried out with the help of automated tools. Where an automated check raises a concern, it is reviewed by a member of our compliance team before a decision is made.
  • We do not allow third-party AI providers to use your personal information to train their general-purpose models.
  • If you believe that a decision affecting you has involved automated processing, you can ask us to explain how it was made, ask for it to be reviewed by a person, and share your point of view.

Who we share your personal information with

We do not sell your personal information. We share it only where necessary for the purposes described in this Policy, and only with recipients who are required to protect it. The main categories of recipients are the following.

  • Companies in the Native Teams group, which help us provide our services in the countries where they operate.
  • Service providers who support our business, such as providers of cloud hosting, software, customer support tools, communications, analytics and professional services. They may use your information only on our instructions and for the purpose of providing their services to us.
  • Banks, payment institutions and other regulated financial partners, which provide payment accounts, cards, currency conversion and payment services through our Platform.
  • Identity verification, screening and fraud prevention providers, which help us carry out the checks we are required to perform.
  • Local partners and advisers, such as payroll, immigration, benefits and legal specialists, where they are needed to provide a service in a particular country.
  • Your organisation, where you use the Platform as a representative or user of a business client.
  • Public authorities, regulators, courts and law enforcement agencies, where we are required by law to share information, or where sharing is necessary to protect our rights or the safety of others.
  • Professional advisers and auditors, such as lawyers, accountants and insurers, where necessary for the operation of our business.
  • A buyer or successor, if all or part of our business is sold, merged or reorganised, in which case your information will continue to be protected in line with this Policy.

We carefully select the organisations we work with, and we put contracts in place that require them to keep your information secure and confidential and to use it only for the agreed purposes.

International transfers

Native Teams operates internationally, and your personal information may be transferred to, stored in or accessed from countries other than the one in which you live, including countries outside the United Kingdom and the European Economic Area. These transfers are necessary for us to provide our services across borders.

Whenever we transfer personal information internationally, we make sure that it receives an appropriate level of protection. We do this by relying on decisions that a country provides an adequate level of protection, or by using recognised safeguards such as the standard contractual clauses approved by the European Commission and the International Data Transfer Agreement or Addendum approved in the United Kingdom, together with additional measures where appropriate. You can contact us for more information about the safeguards we use.

How long we keep your personal information

We keep personal information only for as long as we need it for the purposes for which it was collected, including to meet our legal, accounting and reporting obligations. When we no longer need it, we delete it or anonymise it so that it can no longer be linked to you. The table below explains the general criteria we apply.

Type of informationHow long we keep it
Account and service informationFor as long as your account is active, and afterwards for as long as necessary to meet our legal obligations and to establish, exercise or defend legal claims.
Financial, tax and transaction recordsFor the period required by accounting, tax and financial regulations in the relevant countries, which is usually several years after the end of the financial year to which they relate.
Verification and anti-money laundering recordsFor the period required by anti-money laundering laws, which is usually at least five years after the end of the business relationship.
Support and communication recordsFor as long as needed to resolve your enquiry and to maintain an appropriate record of our relationship with you.
Marketing informationUntil you unsubscribe or object, or until the information is no longer relevant, after which we keep only a minimal record to make sure we respect your choice.
Technical and cookie informationFor the periods explained in our Cookie Policy.

How we protect your personal information

We take the security of your personal information very seriously. We use appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse and alteration. These include encryption of information in transit and at rest, role-based access controls, multi-factor authentication, regular security testing, monitoring of our systems, and training for our people.

Access to personal information is limited to the people who need it to do their jobs, and they are bound by obligations of confidentiality. We also have a documented process for responding to security incidents. If a personal data breach occurs that is likely to result in a high risk to you, we will tell you without undue delay.

You can help us keep your information safe by using a strong and unique password, enabling multi-factor authentication, and contacting us immediately if you suspect that your account has been compromised.

Your rights

You have rights over your personal information, which you can exercise free of charge in most cases. The table below explains these rights. Some of them apply only in certain circumstances, and we will explain if a right does not apply to your request.

Your rightWhat it means
Right of accessYou can ask for a copy of the personal information we hold about you, together with information about how we use it.
Right to rectificationYou can ask us to correct personal information that is inaccurate or to complete information that is incomplete.
Right to erasureYou can ask us to delete your personal information where we no longer have a valid reason to keep it.
Right to restrictionYou can ask us to limit how we use your personal information, for example while we check its accuracy.
Right to objectYou can object to our use of your personal information where we rely on our legitimate interests, and you can object to direct marketing at any time.
Right to data portabilityYou can ask us to provide information you gave us in a structured, commonly used and machine-readable format, or to transfer it to another organisation.
Rights about automated decisionsYou can ask for human review of a decision with legal or similarly significant effects that has been made by automated means, express your point of view and contest the decision.
Right to withdraw consentWhere we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details in the section headed "How to contact us". You can also manage some of your information directly in your account settings. We may need to verify your identity before we respond, and we will usually respond within one month. If your request is complex or we receive a large number of requests, we may extend this period where the law allows, and we will let you know if we do.

Where we process your personal information as a processor on behalf of a business client, that business is responsible for responding to your request. If you contact us about such information, we will forward your request to the business, where appropriate, and assist it in responding.

Complaints

If you are unhappy with how we have handled your personal information, please contact us first, so that we have the opportunity to put things right. We will acknowledge your complaint promptly, investigate it, and tell you the outcome without undue delay.

You also have the right to complain to a data protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office, which you can contact through its website at ico.org.uk. If you live in the European Economic Area, you can contact the data protection authority in the country where you live or work, or where you believe a breach of data protection law has occurred.

Additional information for certain regions

Native Teams serves customers and individuals in many countries, and the data protection laws of some of those countries give you additional rights or require us to provide additional information. Where the law of the country in which you live gives you rights beyond those described in this Policy, we will respect those rights. If you would like to know more about how the law of your country applies, please contact us.

Children

Our website and services are intended for businesses and for adults. We do not knowingly collect personal information from children through our website or Platform. If you believe that a child has provided us with personal information, please contact us and we will delete it.

Links to other websites

Our website and Platform may contain links to websites and services operated by other organisations. This Policy does not apply to those websites and services, and we encourage you to read their privacy policies before providing them with any personal information.

Changes to this Policy

We may update this Policy from time to time to reflect changes in our services, our practices or the law. The date at the top of this Policy shows when it was last updated. If we make significant changes, we will let you know through our website, the Platform or by email before the changes take effect.

How to contact us

If you have any questions about this Policy or how we handle your personal information, or if you would like to exercise any of your rights, please contact us by email at legal@nteams.com. For general questions about your account, our customer support team is available at support@nteams.com.