1. Overview
WorkCentro is a workforce, payroll, invoicing, payments, remittance, document and business-administration platform owned and operated by Hustle 360 LTD.
This Privacy Policy applies to WorkCentro websites, applications, customer portals, public invoice pages, support channels and related services that link to this policy.
2. Our role and the role of organisations
Depending on the feature and context, Hustle 360 LTD may process personal information as a data controller or as a data processor acting on the instructions of a WorkCentro customer.
- We generally act as a controller for account registration, platform security, billing, fraud prevention, support and service improvement.
- We may act as a processor when an organisation uses WorkCentro to manage employee, contractor, payroll, invoice, payment, remittance or document data.
- Organisations are responsible for ensuring they have the authority and lawful basis to upload and manage information about personnel, customers and service providers.
3. Information we collect
Account and identity information
Names, email addresses, phone numbers, usernames, authentication details, profile photographs, identification references and organisation membership.
Employment and workforce information
Job title, department, team, work location, manager, employment status, compensation, onboarding information, performance records and related workforce details.
Payroll, payment and financial information
Salary and payslip information, invoice and quote records, transaction references, payment status, bank-account details, remittance records, contribution information, fees and reconciliation data.
Customer, supplier and invoice information
Customer or supplier names, contact details, addresses, invoice descriptions, payment terms, tax information, public invoice activity and supporting records.
Documents and communications
Files uploaded to WorkCentro, support messages, feedback, email communications, approval records, notes and other content submitted through the service.
Technical and usage information
IP address, device and browser information, approximate location derived from network data, timestamps, session activity, logs, page interactions, security events and diagnostic information.
Information from integrations and providers
Information received from identity providers, payment processors, banks, communication providers, analytics providers and other integrations selected by you or your organisation.
4. How we use personal information
We may use information to:
- create, authenticate and administer accounts;
- provide workforce, payroll, payment, invoice, remittance and document features;
- process instructions and communicate transaction status;
- generate records, receipts, reports, audit trails and notifications;
- provide support and respond to enquiries;
- protect accounts, investigate misuse and prevent fraud;
- maintain, troubleshoot and improve WorkCentro;
- meet legal, regulatory, tax, accounting and compliance obligations;
- enforce agreements and protect the rights, safety and property of users and others;
- send service-related communications and, where permitted, product updates.
5. Lawful bases for processing
Where applicable law requires a lawful basis, we may rely on one or more of the following:
- performance of a contract or steps taken at your request before a contract;
- compliance with a legal obligation;
- your consent, where consent is appropriate and valid;
- legitimate interests that are not overridden by your rights and interests;
- protection of vital interests;
- performance of a task carried out in the public interest where applicable.
When we process information on behalf of an organisation, that organisation determines the relevant lawful basis and processing instructions.
7. International data transfers
WorkCentro and its service providers may process information in countries other than the country where it was collected. Where required, we use appropriate safeguards for international transfers and assess the protection available in the destination.
8. Data retention
We retain information for as long as reasonably necessary to provide the service, fulfil the purposes described in this policy, comply with legal, tax, accounting and regulatory requirements, resolve disputes and enforce agreements.
Retention periods vary according to the type of information, the organisation's instructions, the sensitivity of the data and applicable legal requirements. Information may remain in backups for a limited period after deletion from active systems.
9. Security
We use administrative, technical and organisational safeguards designed to protect information against unauthorised access, loss, alteration, disclosure or destruction. These safeguards may include access controls, encryption, logging, monitoring, backups and personnel controls.
No system is completely secure. You are responsible for protecting your credentials, using secure devices and promptly reporting suspected account misuse.
10. Your privacy rights
Subject to applicable law and relevant limitations, you may have the right to:
- receive information about how your personal information is processed;
- request access to personal information held about you;
- request correction of inaccurate or incomplete information;
- request deletion of information in appropriate circumstances;
- request restriction of certain processing;
- object to certain processing;
- withdraw consent where processing is based on consent;
- request data portability where applicable;
- object to or seek review of certain solely automated decisions;
- lodge a complaint with the Nigeria Data Protection Commission or another competent authority.
We may verify your identity before acting on a request. When WorkCentro processes information for your organisation, we may direct your request to that organisation or assist it in responding.
12. Children
WorkCentro is intended for organisations, authorised business users and adults capable of entering binding agreements. It is not designed as a consumer service for children. Organisations must not submit children's personal information unless they have a lawful basis and have satisfied all applicable requirements.
13. Changes to this policy
We may update this Privacy Policy as our services, practices or legal obligations change. We will post the revised version with a new effective date and may provide additional notice where required.
14. Contact us
Contact us with privacy questions or requests. Please do not send passwords, card PINs or other unnecessary sensitive credentials.