Hitouch HR & Payroll is an HR and payroll system run by Hitouch Global Ltd, Abuja, Nigeria. Companies use it to manage their staff, pay them and handle leave, attendance and HR requests. Staff use it, on the web or as the phone app, to see their own payslips, leave and records. This policy explains what personal data the system holds, why, and who sees it.
Who is responsible
Your employer decides what is recorded about you and is responsible for it (the “data controller”). Hitouch Global Ltd runs the system for your employer (the “data processor”), and is also the controller for its own staff. We handle personal data in line with the Nigeria Data Protection Act 2023.
What we hold
- Identity and contact: name, work and personal email, phone, address, date of birth, photo, next of kin.
- Employment: staff ID, department, job title, branch, line manager, start and leaving dates, contract and probation details, pay grade.
- Pay: salary and allowances, payslips, deductions, loans, expenses, bank name and account number (account numbers are encrypted), tax ID, pension and NHF numbers.
- Time and leave: clock-in and clock-out times; if your employer turns it on, your location at the moment you clock in or out (never in the background); leave requests and balances.
- Work records: performance reviews, training, survey answers (anonymous surveys are stored without your name), recognition, HR requests, disciplinary records and documents your employer keeps on your file.
- Sign-in and security: your sign-in email, a hashed password (we cannot read it), two-step verification settings, and a record of sign-ins and changes made in the system.
- Phone alerts: if you turn them on, an address your browser gives us for sending alerts to that device.
We do not use advertising, we do not sell personal data, and the app has no third-party analytics or tracking.
Why we use it
- To pay staff correctly and on time, and to calculate and report tax, pension and other statutory deductions.
- To run HR: leave, attendance, reviews, training, requests and staff records.
- To keep accounts secure, and to keep a record of who changed what.
- To send emails and phone alerts about your pay, leave and requests.
The legal bases are your employment contract, your employer’s legal obligations (tax, pension, labour law) and their legitimate interest in running HR. Location at clock-in is used only to confirm attendance at a work site.
Who sees it
- You see your own pay, leave and records.
- Your employer’s staff see what their role allows (for example, HR sees staff records and Finance sees pay). Each company’s data is kept apart from every other company’s.
- Service providers who help us run the system, only for that purpose: Railway (hosting and database), Brevo (email), Paystack (bank account checks and salary transfers), Google and Microsoft (only if you sign in with them), and Google, Apple, Mozilla or Microsoft push services (phone alerts, which are encrypted so they cannot read them).
- Authorities, such as tax and pension bodies, when the law requires it.
Our hosting provider may store data outside Nigeria. Where it does, we rely on the safeguards the Nigeria Data Protection Act allows.
How long we keep it
Your employer keeps your records while you work there and afterwards for as long as tax, pension and employment law requires (pay records usually for six years). When a company stops using the system, its data is deleted 90 days after its plan ends. The phone app keeps nothing about your pay on the phone.
Your rights
You can ask to see the data held about you, have it corrected, have it deleted where the law allows, object to or restrict its use, or receive a copy. Ask your employer’s HR team first; you can also write to us at support@hitouchglobal.com. You may complain to the Nigeria Data Protection Commission. See Deleting your account for how to close your account.
Security
Connections are encrypted, bank account numbers are encrypted in the database, passwords are hashed, roles that handle money need two-step sign-in, and every change is logged.
Contact
Hitouch Global Ltd, Abuja, Nigeria · support@hitouchglobal.com