Legal
Privacy
Last updated
Who we are
Trabbly HR is operated by [registered company name], [registered address]. For questions about personal data, write to privacy@trabblyhr.com.
Two different relationships
When you visit this website, we decide what is collected, so we are the controller for that.
When your company uses Trabbly HR to run its HR and payroll, your employer decides what is held about its staff and why. Your employer is the controller; we are a processor acting on their instructions. If you are an employee and want a copy of your data or a correction, ask your HR team — they hold that decision, not us.
What this website collects
- What you type into the demo form — name, work email, company, team size, the countries you employ in, and anything you write. Used to reply to you, and for nothing else. Kept for two years from your last contact.
- Server logs — IP address, page requested, time. Generated by the web host, used for security and diagnosis, and rotated on the host's schedule.
- Google Fonts — the typefaces on this page load from Google's servers, which means Google receives your IP address. It is the only third party this page talks to. Everything else is served from our own domain.
There are no advertising trackers, no analytics pixels, and no cookies set by this site. The payroll figures you can play with are calculated in your browser and never sent anywhere.
What the product holds
On behalf of employers: employee records, pay and payslips, attendance, leave, documents they upload, and the statutory identifiers their country requires. Access is restricted by role inside the product — pay and identity numbers are visible to administrators and to the employee themselves, and a manager sees pay only for their own direct reports. Separation between customers is enforced by the database, not by the interface.
Where it is kept
Managed Postgres in an EU region, with encryption in transit and at rest. Named sub-processors and their regions are listed in the data processing agreement we sign with each customer.
Your rights
Under the GDPR you may request access to your personal data, correction of anything inaccurate, erasure in some circumstances, restriction, portability, and you may object to certain processing. Erasure is limited where an employer is legally required to retain employment and payroll records, which they generally are.
For website enquiries, contact us directly. For anything held by your employer, contact them. You can also complain to the data protection supervisory authority in your own country, without going through us first.
Changes
When this notice changes materially we will say so here and date it. Customers are told directly rather than expected to re-read the page.