Privacy Policy

Last updated: 16 September 2026

Who we are

Work Mint is HR and payroll software built by Work Mint People. Where this page says “we”, it means Work Mint People. You can reach us at info@workmintpeople.com, which is the only address we use.

Two roles matter throughout. When your company uses Work Mint to hold its employees’ records, your company decides what goes in and why. That makes your company the data controller. We process that data on your company’s instructions and for nothing else. We do not sell it, we do not rent it, and we do not use it to train anything.

What is stored

Only what an HR and payroll system needs to do its job:

• Who someone is. Name, photo, date of birth, gender, marital status, national identity number, passport number, home and emergency contact details, blood group where a company records it.
• Their job. Employee code, department, designation, reporting line, team, work location, shift, start date, confirmation date and leaving date.
• Their pay. Salary, allowances, deductions, tax, payslips, bank name, account title, account number and IBAN.
• Their attendance and leave. Clock-in and clock-out times, absences, leave requests and balances, and the identifier that links a person to a biometric device where one is used.
• Documents your company uploads. Identity documents, contracts, offer letters, CVs.
• What changed. An audit record of who changed which field, when, and from what, kept so a disputed figure can be traced.

We ask for nothing beyond this. We do not run advertising trackers, and we do not run third-party analytics inside the application. Cookies, below, covers the public pages where analytics does run.

Where it is held

On servers in Manchester, United Kingdom. Your company’s data is stored separately from every other company’s, enforced by the software rather than by convention: a request that does not identify a company returns nothing at all rather than everything.

Because the data sits in the UK, UK data protection law applies to it. If your company is subject to data protection rules elsewhere as well, those apply to your company’s use of the product and we will help you meet them.

Who can see it

• People in your company, according to the role you give them. An employee sees their own record. A manager sees their team. A data entry operator can maintain records without seeing pay at all.
• Us, only when we need to. Support and maintenance occasionally require our staff to look at a record to fix something. That access is limited to our own staff, is recorded, and is not routine.
• Nobody else. We do not share your data with third parties for their own purposes.

How it is protected

Concretely, and only what is actually in place today:

• All traffic is encrypted in transit over HTTPS.
• Two-factor authentication is mandatory for administrators, enforced on every request rather than offered as a setting.
• Uploaded documents are never served to anyone who is not signed in.
• Payslip PDFs are individually password-protected.
• The audit record cannot be edited or deleted through the application.
• Repeated failed sign-ins are rate-limited.
• API access is read-only, per-company, revocable, and the tokens are stored hashed rather than in plain text.
• Credentials for the system itself are held outside the source code.

We do not hold SOC 2 or ISO 27001 certification and do not claim to. If a certification is a requirement for you, tell us and we will be straight with you about where we are.

How long it is kept

• While your company is a customer, records are kept for as long as your company needs them. Payroll records usually have to be kept for several years under local law, and how long is your company’s call.
• Demo workspaces are temporary. The free period runs for three months. At the end of it we delete the workspace and everything in it automatically, including the user accounts, and we write to you a week beforehand. We do not restore a deleted demo from backup, and within 90 days of it being removed no copy is left anywhere we hold. If you subscribe before the end, nothing is deleted and the workspace becomes your account.
• When your company leaves, we will return an export of your data and delete it on request.

Your rights

If you are an employee whose record is in Work Mint, your employer is the first place to ask, because they control the record and can correct it directly. If you cannot get it resolved that way, write to us at info@workmintpeople.com and we will help. You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted, subject to the payroll records your employer is legally required to keep.

Cookies

The application sets a session cookie so you stay signed in, and a security cookie that protects forms from being submitted by another site. Both are necessary for it to work. The website remembers your language choice.

This website uses Google Analytics to count visits and see which pages people read, which sets cookies in your browser. Your IP address is shortened before it is stored. We do not run advertising trackers, we do not sell data to anyone, and we do not use any of this to build a profile of you.

Analytics does not run inside the application. It is on this website, and on three public pages of the app: the sign-in page, the demo signup form, and the page that confirms a workspace was created. Once you are signed in, nothing on the screens holding your employee, salary and attendance records is measured by anybody but us.

If something goes wrong

If data is exposed, we will tell the affected companies directly and promptly, with what we know and what we are doing about it, rather than waiting until we have a complete picture.

Changes to this page

If we change how the product handles data, this page changes with it and the date at the top moves. Material changes are emailed to customers.

---

This page is published in English. It is the authoritative version: a translated data protection notice would be twenty documents to keep accurate instead of one, and a mistranslated clause is worse than an English one read carefully. Ask us at info@workmintpeople.com if you need it explained in another language.