Privacy Policy

1. Who we are

NexoraHR is licensed HR software operated on behalf of your employer. Your organisation is the data controller for employee personal data processed in the system.

2. Data we process

We process HR data including employee profiles, leave, attendance, expenses, documents metadata, payroll assignments, and training records necessary to deliver the service.

3. Lawful basis

Processing is typically based on employment contract, legal obligation, and legitimate interests in workforce administration, in line with UK GDPR.

4. Security

Sensitive files (documents, receipts, resumes) are stored on private storage and accessed only through authenticated, role-controlled download routes.

5. Your rights

You may request access, rectification, erasure, restriction, portability, or object to processing. See our GDPR information page or submit a data request.

6. Retention

Your employer defines retention periods for HR records. Audit logs of sensitive data access are maintained for security and compliance.