Privacy Policy
1. Who We Are
Headcount Ltd ("Company", "we", "us") is a private limited company registered in England and Wales under company number 13960824. Our registered office is: Dept 2, 43 Owston Road, Carcroft, Doncaster, DN6 8DA, United Kingdom.
We operate automated workforce management and business messaging services via the Meta WhatsApp Business API. This policy explains what data we collect, why, and what we do with it. It is legally binding. Like all our products, it is delivered without empathy but with full GDPR compliance.
2. Data We Collect
When you interact with our services, we may collect:
- Contact Data: Phone numbers, WhatsApp IDs, display names.
- Message Data: Content of messages sent to or from our platform.
- Technical Data: IP addresses, device identifiers, timestamps.
- Usage Data: Message delivery status, read receipts, response rates.
We do not collect biometric data, financial data, or information about your bathroom break duration (that's an internal HR feature only).
3. How We Use Your Data
Your data is processed for the following lawful purposes under UK GDPR:
- Legitimate Interest: Delivering WhatsApp business notifications on behalf of our clients.
- Contract Performance: Fulfilling our obligations to clients who use our messaging platform.
- Legal Compliance: Retaining records as required by HMRC and Companies House.
- Service Improvement: Analysing delivery rates and system performance.
4. Third-Party Sharing
We share data only with essential infrastructure partners:
- Meta Platforms, Inc. — via the WhatsApp Business API. Meta's own Privacy Policy applies to all messages transmitted through their infrastructure.
- Hosting providers — for server and data storage within the UK/EEA.
We do not sell your personal data. Ever. Not even to Bryan.
5. Data Retention
We retain personal data for as long as necessary to fulfil the purposes above, or as required by law. Message logs are retained for a maximum of 90 days. Upon client contract termination, personal data is deleted within 30 days.
6. Your Rights (UK GDPR)
You have the right to:
- Access a copy of your personal data we hold.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests.
- Opt out of WhatsApp communications by replying STOP.
Requests will be acknowledged within 72 hours and fulfilled within 30 days. Unlike our workforce reduction products, data deletion requests are processed with a small amount of empathy.
7. Cookies
This website uses only technically necessary cookies. We do not use tracking cookies, advertising cookies, or any cookies that report back to Bryan in Doncaster.
8. Contact & Complaints
To exercise your rights, ask a question, or report an issue, contact us:
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113.