Privacy Policy

empliHR is a human resources platform for companies. When a company uses empliHR, that company decides what employee data is processed and why; empliHR processes that data on its behalf as a service provider.

Depending on the modules your company uses, we process:

• Account details: name, work email, phone number, role and sign-in records
• Employment records: job title, department, manager, contracts and documents
• Attendance: clock-in and clock-out times and, when enabled by your employer, location at clock-in or during field work
• Leave, payroll and expense data: balances, salary, allowances, deductions, EPF/ETF/APIT and receipts
• Usage data: device, browser, IP address and in-app activity used for security and support

• To provide the HR features your company has turned on
• To keep accounts secure, detect misuse and fix problems
• To send service emails such as invitations, approvals and payslip notices
• To meet legal, tax and accounting obligations

We do not sell personal data and we do not use employee data for advertising.

Location is only collected when your employer enables GPS attendance or field tracking, and only while you are clocked in or using those features. Your employer can see this location for attendance and field-work purposes.

We share data only with service providers that help us run empliHR (for example hosting, email delivery and payment processing), under contracts that require them to protect it, or when the law requires us to.

Each company's data is logically separated. Access is controlled by roles and permissions, connections are encrypted in transit, and administrators can enable two-factor sign-in and single sign-on.

We keep data for as long as your company's account is active and as needed for legal obligations. When a company closes its account, its data is deleted or anonymised within a reasonable period, except where we must keep it by law.

You can ask to access, correct or delete your personal data. Because your employer controls your HR records, we will usually pass your request to them and help them respond. Contact [email protected].

We may update this policy. If the changes are significant, we will let company administrators know before they take effect.