
Employment
Everything you need to manage your workforce
Employer of Record
Your global team, locally employed
Entity Management
Set up and manage entities
HR, Payroll & Benefits
Manage all admin tasks from one place
Employment Contracts
Localised employment contracts
Relocation and Visa
Relocate your team anywhere
Absence Management
Track, approve, and manage time off
Privacy policy
Last updated:
At a glance
This summary sets out the key points of how we handle your personal information. The full detail is in the sections that follow.
- We act on our clients' instructions. When businesses use our Platform to manage and pay their people, they decide how that information is used, and we process it on their behalf and only as they instruct.
- We collect only what we need. Where we decide how information is used ourselves, for example for our website, our customer relationships and our legal obligations, we use only what is necessary.
- We never sell your personal information. We share it only with the people and organisations who need it to help us provide our services, and only under strict safeguards.
- We protect your information. We use recognised security measures, including encryption and access controls, and we require the same high standards from our providers.
- People make the important decisions. We do not make decisions with legal or similarly significant effects on you using automated means alone.
- You are in control. You can access, correct or delete your information, object to certain uses, and unsubscribe from marketing at any time.
- We are here to help. If you have a question or concern, you can contact us at any time, as explained at the end of this Policy.
About this Policy
At Native Teams, we help businesses employ, pay and manage people across borders, and we help individuals work and get paid wherever they are. To do this, we need to handle personal information, and we understand that you trust us to handle it with care. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, who we share it with, and the choices and rights you have.
We have written this Policy to be as clear and easy to read as possible. If anything is unclear, or if you would like more information about a particular topic, please contact us using the details in the section headed "How to contact us".
Who we are
Native Teams Limited is a company incorporated in England and Wales with company number 12584623, and is registered with the UK Information Commissioner's Office under registration number ZB325570. In this Policy, "Native Teams", "we", "us" and "our" refer to Native Teams Limited and, where relevant, the other companies in the Native Teams group.
Our role: processor and controller
Data protection law distinguishes between a controller, which decides why and how personal information is used, and a processor, which handles personal information on behalf of a controller and in line with its instructions. Understanding which role we play helps you know who is responsible for your information and who to contact about it.
We are primarily a processor
Most of the personal information on the Native Teams Platform is provided by our business clients and the people they work with, and is used to deliver the services those clients have chosen. When a business uses our Platform to run payroll, manage its people, pay its contractors or gig workers, or administer its own entity, that business is the controller of the personal information involved. Native Teams acts as its processor, which means that we handle the information on the client's behalf, in accordance with its instructions and our Data Processing Agreement with it, and for no other purpose.
In these situations, the client's own privacy notice explains how your personal information is used. If you are an employee, contractor or other individual whose information has been added to our Platform by a business, and you have a question about your information or would like to exercise your rights, please contact that business first. If you contact us, we will pass your request to the business, where appropriate, and help it to respond.
When we act as a controller
In some situations, we decide for ourselves why and how personal information is used, and we are therefore a controller. These situations are limited, and this Policy explains how we handle personal information in each of them. They include the following:
- when you visit our website, read our content or use our free tools and calculators;
- when we manage our relationship with our business clients, partners and suppliers, including the contact details of their representatives, account administration, billing and support;
- when you create an account in your own name, for example under one of our plans for individuals;
- when we carry out identity verification, anti-money laundering, sanctions and fraud prevention checks, keep financial records, and meet other obligations that the law places on us directly;
- when we send marketing communications and organise events; and
- where a company in the Native Teams group acts as the legal employer of a person under our Employer of Record service, in which case that company is responsible, as required by employment, tax and social security laws, for the personal information it needs to fulfil its obligations as employer.
The table below summarises our role in the most common situations.
Who this Policy applies to
This Policy applies where Native Teams acts as a controller, as described in the previous section. The table below explains which other documents you may also wish to read, depending on how you interact with us.
This Policy does not apply to personal information that we process as a processor on behalf of our business clients. That processing is governed by the instructions of the client concerned, its own privacy notice and our Data Processing Agreement with it.
The personal information we collect
The personal information we collect as a controller depends on how you interact with us and which of our services you use. We collect it in three main ways: directly from you, automatically when you use our website and Platform, and from third parties. The table below summarises the main categories.
We do not intentionally collect special category information, such as information about your health, ethnic origin or religious beliefs, through our website or in the course of our business relationship with you. Where we need to process such information to provide a service, for example to administer sick leave for a person we employ, we explain this in our Individual Privacy Notice and process it only where the law allows.
If you provide us with personal information about another person, such as a colleague you invite to the Platform, please make sure that you are entitled to do so and that the person is aware of this Policy.
How we use your personal information
We use your personal information only where we have a lawful reason to do so. The table below explains the main purposes for which we use personal information and the legal basis on which we rely for each of them.
Where we rely on our legitimate interests, we have balanced those interests against your rights and freedoms, and we only proceed where we are satisfied that your interests do not override ours. You can ask us for more information about this assessment, and you have the right to object to processing that is based on legitimate interests.
Where we rely on your consent, you can withdraw it at any time. Withdrawing your consent does not affect the lawfulness of any processing that took place before you withdrew it.
Cookies and similar technologies
We use cookies and similar technologies on our website and Platform. Some of them are strictly necessary for the website and Platform to work, while others help us understand how our services are used, remember your preferences or measure the effectiveness of our marketing. We only use non-essential cookies where you have agreed to them, and you can change your choices at any time through the cookie settings on our website. Our Cookie Policy explains this in more detail.
Marketing communications
We would like to keep you informed about our services, new features, events and content that may be of interest to you. We send marketing communications only where you have agreed to receive them or where the law otherwise allows us to do so, for example where you are a business contact and our communications are relevant to your role.
You can unsubscribe from marketing communications at any time by using the unsubscribe link in any marketing email, by changing your preferences in the Platform, or by contacting us. Even if you unsubscribe from marketing, we will continue to send you service messages that are necessary for the use of your account.
Artificial intelligence and automated decisions
We use artificial intelligence in limited and clearly defined ways, for example to help our team respond to enquiries, to help you find information, and to help detect unusual activity on our Platform. Our Responsible AI Policy explains where we use AI, where we do not, and the safeguards we apply.
Our commitments on automated decisions
- We do not make decisions that have legal or similarly significant effects on you, such as refusing or closing an account, using automated means alone. A member of our team reviews any such decision.
- Some of our compliance checks, such as identity verification and sanctions screening, are carried out with the help of automated tools. Where an automated check raises a concern, it is reviewed by a member of our compliance team before a decision is made.
- We do not allow third-party AI providers to use your personal information to train their general-purpose models.
- If you believe that a decision affecting you has involved automated processing, you can ask us to explain how it was made, ask for it to be reviewed by a person, and share your point of view.
Who we share your personal information with
We do not sell your personal information. We share it only where necessary for the purposes described in this Policy, and only with recipients who are required to protect it. The main categories of recipients are the following.
- Companies in the Native Teams group, which help us provide our services in the countries where they operate.
- Service providers who support our business, such as providers of cloud hosting, software, customer support tools, communications, analytics and professional services. They may use your information only on our instructions and for the purpose of providing their services to us.
- Banks, payment institutions and other regulated financial partners, which provide payment accounts, cards, currency conversion and payment services through our Platform.
- Identity verification, screening and fraud prevention providers, which help us carry out the checks we are required to perform.
- Local partners and advisers, such as payroll, immigration, benefits and legal specialists, where they are needed to provide a service in a particular country.
- Your organisation, where you use the Platform as a representative or user of a business client.
- Public authorities, regulators, courts and law enforcement agencies, where we are required by law to share information, or where sharing is necessary to protect our rights or the safety of others.
- Professional advisers and auditors, such as lawyers, accountants and insurers, where necessary for the operation of our business.
- A buyer or successor, if all or part of our business is sold, merged or reorganised, in which case your information will continue to be protected in line with this Policy.
We carefully select the organisations we work with, and we put contracts in place that require them to keep your information secure and confidential and to use it only for the agreed purposes.
International transfers
Native Teams operates internationally, and your personal information may be transferred to, stored in or accessed from countries other than the one in which you live, including countries outside the United Kingdom and the European Economic Area. These transfers are necessary for us to provide our services across borders.
Whenever we transfer personal information internationally, we make sure that it receives an appropriate level of protection. We do this by relying on decisions that a country provides an adequate level of protection, or by using recognised safeguards such as the standard contractual clauses approved by the European Commission and the International Data Transfer Agreement or Addendum approved in the United Kingdom, together with additional measures where appropriate. You can contact us for more information about the safeguards we use.
How long we keep your personal information
We keep personal information only for as long as we need it for the purposes for which it was collected, including to meet our legal, accounting and reporting obligations. When we no longer need it, we delete it or anonymise it so that it can no longer be linked to you. The table below explains the general criteria we apply.
How we protect your personal information
We take the security of your personal information very seriously. We use appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse and alteration. These include encryption of information in transit and at rest, role-based access controls, multi-factor authentication, regular security testing, monitoring of our systems, and training for our people.
Access to personal information is limited to the people who need it to do their jobs, and they are bound by obligations of confidentiality. We also have a documented process for responding to security incidents. If a personal data breach occurs that is likely to result in a high risk to you, we will tell you without undue delay.
You can help us keep your information safe by using a strong and unique password, enabling multi-factor authentication, and contacting us immediately if you suspect that your account has been compromised.
Your rights
You have rights over your personal information, which you can exercise free of charge in most cases. The table below explains these rights. Some of them apply only in certain circumstances, and we will explain if a right does not apply to your request.
To exercise any of these rights, please contact us using the details in the section headed "How to contact us". You can also manage some of your information directly in your account settings. We may need to verify your identity before we respond, and we will usually respond within one month. If your request is complex or we receive a large number of requests, we may extend this period where the law allows, and we will let you know if we do.
Where we process your personal information as a processor on behalf of a business client, that business is responsible for responding to your request. If you contact us about such information, we will forward your request to the business, where appropriate, and assist it in responding.
Complaints
If you are unhappy with how we have handled your personal information, please contact us first, so that we have the opportunity to put things right. We will acknowledge your complaint promptly, investigate it, and tell you the outcome without undue delay.
You also have the right to complain to a data protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office, which you can contact through its website at ico.org.uk. If you live in the European Economic Area, you can contact the data protection authority in the country where you live or work, or where you believe a breach of data protection law has occurred.
Additional information for certain regions
Native Teams serves customers and individuals in many countries, and the data protection laws of some of those countries give you additional rights or require us to provide additional information. Where the law of the country in which you live gives you rights beyond those described in this Policy, we will respect those rights. If you would like to know more about how the law of your country applies, please contact us.
Children
Our website and services are intended for businesses and for adults. We do not knowingly collect personal information from children through our website or Platform. If you believe that a child has provided us with personal information, please contact us and we will delete it.
Links to other websites
Our website and Platform may contain links to websites and services operated by other organisations. This Policy does not apply to those websites and services, and we encourage you to read their privacy policies before providing them with any personal information.
Changes to this Policy
We may update this Policy from time to time to reflect changes in our services, our practices or the law. The date at the top of this Policy shows when it was last updated. If we make significant changes, we will let you know through our website, the Platform or by email before the changes take effect.
How to contact us
If you have any questions about this Policy or how we handle your personal information, or if you would like to exercise any of your rights, please contact us by email at legal@nteams.com. For general questions about your account, our customer support team is available at support@nteams.com.