Privacy Policy

For manager and senior leader accounts, MJM Connect Ltd is the data controller. For staff timesheet data, your employer is the controller and we act as processor on their instructions.

Account data: name, work email address, organisation name and role. Staff records: name, work email and standard hours, entered by your organisation. Timesheet data: dates, hours, whether hours are regular or overtime, notes, approval decisions and amendment reasons. Billing data: plan, subscription status and Stripe customer reference — card details are handled by Stripe and never reach our servers. Operational logs needed to run and secure the service.

To provide the service (contract), to send timesheet request, reminder, approval and billing emails (contract), to keep the service secure and prevent abuse (legitimate interests), and to meet accounting and legal obligations (legal obligation).

Staff complete timesheets through a single-use link containing a random token, sent to their work email. The link expires. Anyone with the link can view and complete that timesheet, so it should not be forwarded.

We use a small number of processors: Supabase (database and authentication hosting), Resend (transactional email delivery) and Stripe (payments). We do not sell personal data or use it for advertising.

Timesheet and staff data is kept for as long as your organisation's account is active, and deleted on request from your organisation. Billing records are kept for six years to meet UK accounting requirements.

You have the right to access, correct, delete or restrict processing of your personal data, to object to processing, and to data portability. If you are a staff member, contact your employer first — they control your timesheet data. Otherwise email info@tidytimesheets.co.uk. You can complain to the Information Commissioner's Office (ico.org.uk).

We use only essential cookies and local storage needed to keep you signed in and to remember interface preferences. We do not run advertising or third-party tracking cookies.