PayrollOS, also described as HULO HR, is provided by HULO Global Limited, registered in England and Wales under company number 17134928. Our registered office is Unit A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE. Contact [email protected] for privacy questions or requests. Our ICO registration reference is ZC158327.
Service availability
Only provide information required by services enabled for your organisation. Employee records, National Insurance numbers, bank details, health information and identity documents must not be uploaded until payroll processing is authorised and an applicable data-processing agreement is in place. Supplied example records and documents are not evidence of real payroll and may be reset or removed.
The people who enquire about the service or administer accounts can still be identifiable. HULO controls how the business contact, account administration and security information described below is used. Our general privacy notice also explains website enquiries, Google email delivery, Cloudflare website security and international processing.
Account and organisation information
Depending on the account facilities you use, we process your name and contact details, account identifiers, organisation memberships, assigned permissions, invitations, authentication and multi-factor authentication information, relevant access events and support correspondence. We receive this information from you, your organisation’s authorised administrator and use of the service.
We use it to provide and protect access, apply organisation permissions, investigate problems and administer the service. Our lawful basis is performance of a contract where the contract is with you as an individual, and otherwise our legitimate interests in delivering the contracted business service, supporting authorised users and preventing misuse. Applicable legal duties may require relevant records to be kept or disclosed.
An administrator can assign access to particular organisations. An accountant’s access depends on the client’s assignment and permissions; one client assignment does not grant access to another. Authorised HULO operators may access information where needed to administer or support the service. An employer or adviser inviting you is responsible for its own use of your information.
Authentication and browser storage
The application uses server-side sessions, a session cookie and a request-protection cookie. It stores display preferences on your device. It does not use the display-preference entry to store payroll information or sign-in tokens. See the cookies notice.
Multi-factor authentication and sensitive actions can require a fresh verification. Authentication and security events are used to investigate unauthorised access and enforce permissions. Do not send passwords, recovery codes or connection secrets in ordinary email or a contact form.
Connections and payments
An HMRC connection applies to the selected organisation, environment and available service. It must be authorised through the enabled product workflow. Local simulation does not contact HMRC. If external sandbox access is enabled, requests and sandbox credentials are sent to the relevant HMRC sandbox service for that purpose. Live tax submissions are not currently enabled in the available hosted workspace.
Supported Companies House lookup uses the public register to obtain relevant company information. Public company information can include personal information, so public availability does not remove privacy responsibilities.
Paid enrolment is not currently open. When Stripe billing is enabled for an agreed paid service, payment details are entered on Stripe-hosted pages. HULO receives the subscription, invoice and payment-status information needed to administer the account. Stripe explains its processing in its privacy policy.
Retention and your rights
Account information is needed while access is provided and for closure, support and relevant security investigations. Contract, invoice and legal-claim records can have different retention requirements. Example records are not retained as evidence of actual payroll. Contact us for the period or criteria applicable to a particular record.
Depending on the circumstances, you can request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. Where consent is the basis for a particular use, it can be withdrawn without changing the lawfulness of earlier use. We may need to verify your identity or organisation authority before disclosing records. You can also complain to the ICO.
Before live employee data
live employee payroll processing requires a separate approved deployment and an applicable data-processing agreement. That agreement must identify the controller and processor roles, instructions, data categories, approved service providers and processing locations, security and assistance obligations, and return or deletion arrangements.
Where an employer controls its employees’ information, its privacy notice explains its purposes and lawful bases. HULO’s role in processing that information will be set out in the service agreement. This notice is not a data-processing agreement or permission to upload real employee records.