Privacy Policy
Version 1.0 · Last updated 2026-09-02
2. Lawful Basis for Processing
Legitimate interests and contractual necessity for contractor payroll and compliance reporting (GDPR Art. 6(1)(b) and 6(1)(f)).
This internal dashboard processes contractor and employee information for payroll reconciliation, compliance reporting, and document management.
3. Personal Data We Process
- Identity and contact data (name, email)
- Employment and contractor status data
- Payroll reconciliation and document receipt records
- Uploaded Excel reference data
- Staff account credentials (hashed passwords)
4. Retention
Contractor and payroll-related records are retained for 84 months unless a longer period is required by law or ongoing contractual obligations.
Employee status records in reporting databases follow a 84 month retention guideline.
Automated deletion schedules are managed operationally by the Data Protection Officer in line with business requirements.
5. Processors & Third Parties
- Amazon Web Services (RDS) — Database hosting (EU (eu-west-1))
- DigitalOcean Spaces — Document storage (EU (fra1))
- Google Analytics — Usage analytics (consent required) (US/EU)
- Cloudflare — Performance analytics (consent required) (Global)
Non-essential analytics (Google Analytics, Cloudflare Insights) and Google Maps are loaded only after cookie consent.
6. Your Rights (GDPR)
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restrict processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie)
7. Data Subject Requests
Authorised staff may use the Data Subject Request tool to generate read-only exports for access requests.
For erasure or restriction requests, contact noreply@cozytech.co.in or use the erasure request form in the staff tool. Erasure requests are reviewed manually and do not trigger automatic deletion.
8. Cookies
- Essential: session, authentication, CSRF protection
- Analytics (optional): Google Analytics, Cloudflare Insights
- Functional (optional): Google Maps
You can change your choice anytime by clearing site cookies and revisiting the dashboard.