Privacy Policy – eOctopus HRM

Last Updated: 29 January 2025

1. Definitions

TermDefinition
“Company”eOctopus, Commercial Registration No. 1010686147, incorporated under the laws of the United Kingdom.
“Application” / “App”The mobile / web application branded as eOctopus HRM.
“User”Any individual who accesses or uses the App.
“Personal Data”Any information that identifies or can reasonably identify a natural person, directly or indirectly.
“Third Party”Any entity outside the contractual relationship between the Company and the User.
“Applicable Laws”All data‑protection regulations in force in the United Kingdom.

2. Introduction

This Privacy Policy is a legally binding agreement between you (“User”) and eOctopus (“Company”) governing the eOctopus HRM mobile / web application (“App”). By accessing or using the App you acknowledge that you have read, understood, and agreed to be bound by this Policy, including the processing of personal data in accordance with the Personal Data Protection Law of the United Kingdom.

eOctopus is the data controller for any personal data displayed or otherwise processed through the App. The App does not collect new personal data from your device; it merely renders information already stored in your organisation’s ERP system.

3. Scope

This Policy applies to all Personal Data processed through the App, whether relating to the User or to third‑party data that the App displays on the User’s behalf.

4. Data Collection

CategoryExamplesPurpose
Authentication DataUsername, hashed password, one‑time passcode / tokenSecure sign‑in and session management
Technical DataDevice model, OS version, browser, IP address, timestamps, diagnostic logsPlatform security, fraud detection, troubleshooting, performance
Usage LogsAnonymised screen views, API calls, error codesService analytics and reliability monitoring
Local‑Storage DataEncrypted session token, language preference, UI settings, last‑sync stampImprove UX and enable rapid re‑authentication; data remains on device

The App does not request or access photos, contacts, GPS, camera, microphone, payment data, or screen recordings.

5. Methods of Processing

  1. User‑supplied credentials at registration / sign‑in.
  2. Read‑only queries to the ERP system to retrieve and display data.
  3. Storage of an encrypted session token and preferences in the device’s local storage.

6. Purpose & Legal Basis

7. Retention & Deletion

Personal information is retained only for as long as necessary to achieve the purposes outlined in this Policy or as required by law. Once a User ceases to use the App, personal data will be securely deleted or anonymised from eOctopus HRM - and from any third‑party processor acting on eOctopus's behalf—after the expiry of the legally mandated retention period, unless we are under a legal obligation to retain it longer or it is related to an ongoing judicial proceeding.

A User’s request to delete or amend personal data may affect their ability to use certain features or services, and may result in termination of those services. eOctopus may be unable to recover data once it has been permanently deleted.

8. Cross‑Border Transfers

Data is stored within the Kingdom of Saudi Arabia. Any transfer abroad follows PDPL safeguards and requires explicit User consent.

9. Changes

eOctopus reserves the right to update or modify this Privacy Policy at any time to reflect changes in data‑processing practices or legal requirements. Users are advised to review this Policy periodically for any updates. Material changes will be announced in‑App or via e‑mail at least 30 days before they take effect.

10. Governing Language

This Policy is issued in both Arabic and English. The English version is a translation of the Arabic version. In case of any discrepancy, the Arabic version shall prevail.

11. Contact Us

Email: info@eOctopus.uk
Address: 71-75, Shelton Street, Covent Garden

12. Effective Date

This Policy is effective as of 21 January 2024.

© 2025 eOctopus. All rights reserved.