Legal
Privacy Policy
Last updated: September 2026
1. Who we are
StaffRoom is operated by Dealgan Apps (“we”, “us”, “our”), United Kingdom, the maker of the StaffRoom staff management app for hospitality. This Privacy Policy explains how we collect, use and protect personal data on our website (www.dealganapps.com) and in the StaffRoom app.
If you have any questions about this policy or your data, contact us at info@dealganapps.com.
2. What data we collect
On this website: we use privacy-conscious analytics (PostHog) to understand how the site is used, including pages viewed, device and browser type, and approximate region. If you contact us, we collect your name, email address and the contents of your message.
In the StaffRoom app: account details (name, email, role), rota and shift information, GPS location at the moment of clock-in and clock-out only, documents you upload (such as contracts and right-to-work records), and messages sent through team chat.
3. How we use your data
We use personal data to provide and improve StaffRoom, including scheduling shifts, verifying clock-ins, producing payroll exports, storing documents securely, providing support, processing billing and keeping the service secure.
We do not sell personal data, and we do not use it for third-party advertising.
4. Our legal bases (UK GDPR)
We process personal data where it is necessary to perform our contract with you, where we have a legitimate interest in running and improving the service, where we are required by law (for example, right-to-work record keeping), and, where none of these apply, with your consent.
5. Where data is stored
Data is encrypted in transit and at rest. Uploaded documents are stored on Amazon Web Services (AWS S3). We use a small number of trusted processors to run the service, including our hosting provider, PostHog (analytics) and Stripe (billing). Each processes data only on our instructions.
6. How long we keep data
We keep account, rota and clock-in data for as long as your account is active. When an account is closed or data is deleted, we remove it within a reasonable period, except where the law requires us to keep certain records for longer.
7. Your rights
You have the right to access, correct, delete, restrict or object to our processing of your personal data, and the right to data portability. To exercise any of these, email info@dealganapps.com.
You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data.
8. International transfers
If personal data is transferred outside the UK or EEA (for example, by our processors), we ensure appropriate safeguards are in place, such as standard contractual clauses.
9. Young people
StaffRoom is a workplace tool intended for users aged 16 and over. We do not knowingly collect data from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date, and we will notify account holders of material changes by email.
