Privacy Policy

1. Information We Collect

StaffComply collects information necessary to provide workforce training, competency and compliance-record services:

• Staff names, email addresses, and job titles
• Department, site, and role assignments
• Training progress and assessment scores
• Certificate and qualification records
• Employment-status information that an organisation chooses to manage in StaffComply
• Support messages and learner-submitted evidence or qualification files

2. How We Use Your Data

• Deliver and track mandatory compliance training
• Generate compliance reports and evidence packs
• Issue and verify training certificates
• Enable manager sign-off and practical assessments
• Maintain regulatory compliance records

3. Data Storage & Security

StaffComply uses access controls and authenticated services to restrict business and learner records to authorised users. Data is processed using the hosting, storage and service providers required to operate StaffComply. Organisations using StaffComply are responsible for configuring user access appropriately and for their own data-protection obligations.

4. Data Retention

Retention depends on the type of record, the customer's documented retention requirements and any applicable legal, regulatory, employment, insurance or audit need. StaffComply does not apply a single statutory retention period to every training record. When an account is deleted, personal account/profile data is removed and records that must legitimately be retained for compliance or audit are anonymised or de-identified where appropriate.

5. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to processing of your data
• Request data portability

6. Account Deletion

You can delete your StaffComply account from Profile Settings → Delete Account. This removes the login account and personal profile information. Data that must legitimately be retained for compliance, security or audit purposes may be retained only in anonymised or de-identified form where appropriate.

If you no longer have access to the app, you can request account and associated-data deletion by emailing Support@HHnextGen.co.uk. Include the email address used for StaffComply so the request can be verified.

7. Contact

For privacy or data-rights inquiries, contact your organisation's StaffComply administrator or email Support@HHnextGen.co.uk