Privacy policy

MyDekela is operated by MyDekela Ltd, company number 17433859, registered in England and Wales. Our registered office is Cae Felin, Cyffylliog, Ruthin, Wales, LL15 2DW.

Privacy questions can be sent to hey@mydekela.com.

MyDekela Ltd acts as a controller for information used to manage enquiries, trials, customer accounts, billing administration, service security, support and our own business records.

This may include names, work contact details, organisation details, account and authentication records, support communications, service activity, billing references and the privacy choices made on our public website.

The customer organisation normally decides why and how its employee, worker, candidate and HR information is used. It is therefore the controller for that workforce information, and MyDekela Ltd processes it on the organisation's documented instructions to provide the platform.

Workforce records can include employment details, absence, performance, training, documents, workplace matters and other information the organisation chooses to manage. Questions about an employment record should usually be raised first with the organisation that created it.

• To respond to enquiries and take steps requested before a contract.
• To provide, secure and administer the contracted MyDekela service.
• To maintain billing, audit and business records and meet legal obligations.
• To operate and improve the service where our legitimate interests do not override an individual's rights.
• To use optional public-site analytics only when consent has been given.

When MyDekela acts only as a processor, the customer organisation is responsible for identifying and explaining the lawful basis for its workforce processing.

We use controlled service providers for cloud hosting, database and authentication, email delivery, monitoring and secure billing. Stripe handles payment-card entry on its own secure pages; MyDekela stores billing references rather than full card details.

Optional Human HR Support is delivered separately by Dekela HR Services. Workforce information is available to that supplier only when the customer organisation grants the relevant secure support access. We do not sell personal information.

Where a provider processes personal information outside the UK, an appropriate UK transfer mechanism and proportionate safeguards must be in place.

We keep information only for as long as it is needed for the purpose collected, customer instructions, security, dispute handling and legal or accounting duties. The customer organisation controls retention decisions for workforce records, subject to the service agreement and applicable law.

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or object to processing, and to receive certain information in a portable format. You can withdraw consent where consent is relied upon.

Contact us at hey@mydekela.com. If your request concerns a workforce record, we may need to refer it to your employer or the customer organisation acting as controller. You can also complain to the Information Commissioner's Office.

MyDekela uses access controls, tenant separation, audit records and protected service integrations to reduce the risk of unauthorised access. No service can remove every risk, so suspected privacy or security issues should be reported promptly.

We will update this notice when our services or use of personal information changes. The latest version and its date will remain available on this page.

This notice describes the current MyDekela service design. Formal legal review of the wider customer terms and optional Human HR Support arrangements is continuing before the first real client is invited. We will publish any resulting changes to this notice.