Privacy policy

Vardies is operated by n2.systems. For account and platform data, n2.systems acts as the service provider and controller for its own operational purposes.

When a business uses Vardies to manage its workforce, that business decides why employee data is processed. The business is the controller for that workforce data and Vardies acts as its processor under the applicable data-processing agreement.

We process account details such as name, email address, language preference, authentication records, and security events. A business may also add employee contact details, skills, availability, schedules, leave, time-clock events, pay-rate information, and legally required workforce identifiers.

We collect technical security data such as session identifiers, IP address, user agent, audit timestamps, and delivery status. Passwords, provider secrets, and time-clock credentials are stored as hashes or encrypted values and are never shown in reports.

We use data to authenticate users, operate the requested schedules and reports, deliver notifications, protect the service, maintain an immutable audit history, provide customer support, process subscriptions, and meet legal obligations.

We do not sell workforce data or use it for advertising. Tenant data is isolated by business and access follows the user’s role.

We retain data for the period required to provide the service, meet contractual and statutory duties, resolve disputes, and preserve security records.

You may request access, correction, restriction, portability, or deletion where the law permits. Contact the business that supplied your account for workforce-data requests, or contact n2.systems for platform-data requests. You may also complain to your local supervisory authority.

Service providers may process data in the European Economic Area or another country with an appropriate transfer mechanism. We use access controls, encryption in transit, encrypted secrets, session revocation, rate limits, and audit logging to protect the service.