Privacy Policy

1. Who We Are

RockPay is developed and licensed by AM Consultancy (Alejandro Munoz Lopez), business licence BL257697, Gibraltar GX11 1AA. We are the data controller for personal data processed through the RockPay Service.

For privacy questions, contact us at privacy@rockpay.co.uk.

2. Data We Collect

We collect the following categories of data:

• Account data: your name, email address, company name, business licence number, PAYE reference and account credentials.
• Employee data: names, addresses, dates of birth, tax codes, National Insurance numbers, payroll amounts, bank account details, leave records, benefits and employment history you enter or upload.
• Usage data: IP address, browser type, device information, pages visited and diagnostic logs.
• Communications: emails, support tickets and feedback you send us.
• Payment data: handled by our payment processor; we do not store full payment card numbers.

3. How We Use Your Data

We use your data to:

• provide, operate and maintain the RockPay payroll service;
• calculate PAYE, Social Insurance and statutory forms for your Gibraltar payroll;
• communicate with you about your account, security and service updates;
• process payments and manage subscriptions;
• prevent fraud, abuse and security incidents;
• improve the Service and comply with legal obligations.

4. Legal Basis for Processing

We process personal data on the following legal bases: performance of a contract with you; compliance with legal obligations (including tax and employment law); your consent, where you have expressly given it; and our legitimate interests in operating a secure and reliable service.

5. Who We Share Data With

We share data only with trusted service providers who help us operate the Service, such as cloud hosting providers and payment processors. We may also disclose data when required by law, court order or to protect our rights. We do not sell personal data.

6. International Data Transfers

Your data may be stored or processed outside Gibraltar. Where this happens, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection law.

7. Data Retention

We keep your data for as long as your account is active and for the period necessary to comply with legal and tax record-keeping obligations. After that, we securely delete or anonymise your data, unless you request earlier deletion and we are not required to retain it.

8. Your Rights

Under applicable data protection law, you and your employees may have the right to access, correct, erase, restrict processing, object to processing, and request data portability. You may also withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@rockpay.co.uk. We will respond within the time required by law.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption, access controls and regular security reviews. No online service is completely secure, so you must also protect your account credentials and report any suspected unauthorised access.

10. Cookies and Tracking

We use essential cookies to make the Service work and optional analytics cookies with your consent. You can manage your choices through the cookie banner shown when you first visit the site.

11. Children

The Service is intended for businesses and is not directed at children under 16. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the "Last updated" date. Please review it regularly.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@rockpay.co.uk or at the address in section 1.