When you use our services, you are trusting us with your information. We understand that this trust carries significant responsibility, and we work diligently to protect your data and provide you with control over it. This Privacy Policy is designed to comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA) where applicable.
1. Identity and Contact of the Data Controller
SIMPLEWORKSHIFT LLC, a Florida limited liability company with registered offices at 7345 W Sand Lake Rd Ste 210 Office 1391, Orlando, FL 32819, hereinafter "SimpleWorkshift," is committed to protecting the privacy and security of your personal information.
For privacy and security questions, contact us at: [email protected]
2. Scope of This Policy
This Privacy Policy applies to:
- Users registered on the simpleworkshift.com platform;
- Customers (individuals or legal entities) who subscribe to our services;
- End users authorized by Customers to access the system;
- Visitors to our website and mobile application.
3. Personal Data We Collect
Depending on the service used, we may collect the following categories of data:
- Identification data: first and last name, job title;
- Contact data: email address, phone number, mailing address;
- Access data: login credentials (username and hashed password), access logs, IP address;
- HR and employment data: work schedules, attendance records, absences, time reports;
- Billing data: payment history, invoices;
- Technical data: device information, operating system, browser, cookies, and analytics.
4. Purposes of Processing
Personal data is processed for the following purposes:
- Providing contracted services (attendance management, time tracking, report generation);
- Managing user accounts (registration, authentication, support);
- Billing and administrative management;
- Compliance with legal obligations (tax, employment, accounting);
- Ensuring platform security (detecting unauthorized access, preventing fraud);
- Improving services through aggregated and anonymized data that does not directly identify any user;
- Business communications related to SimpleWorkshift services, where consent has been obtained or where there is a legitimate interest.
5. How We Use Your Data
We process personal data only for legitimate business purposes, including:
- Providing contracted services: to deliver and operate the platform you have subscribed to;
- Compliance with applicable law: where required by U.S. federal or state law (e.g., tax, employment, accounting obligations);
- Security and fraud prevention: to protect the platform and its users from unauthorized access or misuse;
- Marketing communications: only where you have provided consent, which you may withdraw at any time by contacting us at [email protected] or using the unsubscribe link in any email we send.
6. Data Retention
Data is retained for as long as the contractual relationship exists and, thereafter, for the periods required by law.
- Usage and access data: up to 5 years for security and legal defense purposes;
- Billing data: up to 7 years, as required by applicable tax regulations;
- HR and employment data: up to 5 years, in accordance with applicable employment laws (the FLSA requires retention of time and payroll records for a minimum of 2–3 years; we retain for up to 5 years for legal defense purposes);
- Anonymized data: may be retained indefinitely for statistical purposes;
- After applicable retention periods, data will be securely deleted.
7. Sharing and Transfer of Data
Data may be shared with:
- Public authorities, where required by law;
- Service providers acting as data processors (cloud services, support, billing), always under agreements ensuring data protection;
- Banking or payment entities to process transactions.
In the case of international transfers of personal data outside the United States, such transfers will only take place where adequate legal safeguards exist, such as Standard Contractual Clauses or other mechanisms approved under applicable law.
8. Your Rights
Depending on your location and applicable law, you may have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion of your data when it is no longer necessary for the purposes for which it was collected;
- Request restriction of processing in certain circumstances;
- Request portability of your data in a commonly used, machine-readable format;
- Withdraw consent at any time for consent-based processing, without affecting the lawfulness of prior processing.
California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to opt out of the sale of personal information (we do not sell personal data), and the right to non-discrimination for exercising privacy rights.
To exercise any of these rights, contact us at: [email protected]
9. Data Security
SimpleWorkshift implements appropriate technical and organizational security measures, including:
- Regular team training on data protection practices;
- Encryption of data in transit and at rest;
- Access controls and strong authentication;
- Ongoing monitoring and regular backups;
- Restricted access limited to authorized personnel.
10. Infrastructure and Data Location
SimpleWorkshift uses cloud computing services provided by Amazon Web Services (AWS). For services directed to U.S. customers, personal data is hosted in AWS data centers located in the United States, in the US East (Ohio) — us-east-2 region.
The data centers we use meet high standards of physical and logical security and hold internationally recognized certifications. Access to data is restricted to authorized personnel and to service providers acting as data processors, always under agreements ensuring compliance with applicable privacy laws.
11. Cookies and Tracking Technologies
SimpleWorkshift uses cookies and similar tracking technologies (such as web beacons and pixel tags) to operate the platform, analyze usage, and support our marketing efforts. Specifically:
- Essential cookies: required for authentication, session management, and core platform functionality. These cannot be disabled without affecting service operation.
- Analytics cookies: used through Google Tag Manager and related tools to understand how users interact with our website and improve our services. Data collected is aggregated and does not directly identify individual users.
- Marketing cookies: may be used to deliver relevant advertising and measure campaign effectiveness. These are only activated where permitted by applicable law.
You may manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect certain features of the platform.
Do Not Track: Some browsers offer a "Do Not Track" (DNT) signal. Because there is currently no industry-wide standard for how to respond to DNT signals, SimpleWorkshift does not alter its data collection practices in response to DNT signals. We will revisit this policy if a uniform standard is established.
12. Minors
SimpleWorkshift offers a B2B service directed at businesses and adult professionals. We do not knowingly collect or process personal data from individuals under the age of 18 who do not have the legal capacity to enter into contracts or work. If we become aware that a minor without legal capacity has registered, the account will be terminated and the data securely deleted.
13. Modifications to This Policy
SimpleWorkshift may update this Privacy Policy at any time. The most recent version will always be available at simpleworkshift.com. For significant changes, registered users will be notified by email or through a notice on the platform.
14. Governing Law
This Privacy Policy is governed by applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and other applicable state and federal regulations.
This document was last updated on March 6, 2026.