Privacy Notice
1. Introduction
Welcome to Yes Pay Group (“we,” “our,” or “us”). We are committed to protecting the privacy and security of the personal data we process. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website yespaygroup.com, use our payroll and HR software solutions, or engage with our services (collectively, the “Services”).By accessing our Services, you consent to the data practices described in this notice.
2. Information We Collect
We collect information in two primary capacities: as a Data Controller (for our direct clients and website visitors) and as a Data Processor (for employee data managed on behalf of our clients).
A. Information You Provide to Us
- Client Account Data: When you register for our services, we collect business contact details, company registration numbers, tax identification numbers, and authorized representative information.
- Employee Data (Processed on behalf of Clients): To perform payroll and HR functions, we process data uploaded by our Clients, including but not limited to:
- Full names, addresses, and contact details.
- Government-issued identification numbers (e.g., NRIC, Passport numbers).
- Financial information (Bank account numbers, salary details).
- Employment details (Position, attendance records, leave history).
- Statutory details (Tax deductions, social security contributions).
B. Information Collected Automatically
- Usage Data: We may collect information about how you access and use the Services, including your IP address, browser type, operating system, and access times.
- Cookies: We use cookies to enhance user experience and analyze website traffic.
3. How We Use Your Information
We use the collected data for the following purposes:
- Service Delivery: To calculate payroll, process salary disbursements, manage leave/attendance, and generate HR reports.
- Compliance: To generate statutory forms and ensure compliance with local labor and tax laws (e.g., LHDN, CPF, SOCSO, depending on jurisdiction).
- Communication: To send system updates, security alerts, and support messages.
- Security: To monitor and prevent unauthorized access or fraudulent activity
4. Disclosure of Your Information
We do not sell your personal data. We may share information only in the following circumstances:
- Statutory Bodies: We may disclose payroll data to government agencies (e.g., Tax Authorities, Social Security Boards) as required by law for statutory submissions.
- Financial Institutions: Salary data is shared with banking partners solely to facilitate fund transfers and salary disbursements.
- Service Providers: We may employ third-party companies (e.g., cloud hosting providers, email services) to facilitate our Service. These third parties have access to you Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities
5. Data Security
We implement industry-standard security measures to protect your personal and financial data, including:
- Encryption: Data is encrypted in transit (using SSL/TLS) and at rest.
- Access Controls: Strict role-based access controls limit who can view sensitive payroll data.
- Regular Audits: We conduct regular security assessments to identify and mitigate risks
6. Data Retention
- Client Data: Retained for as long as your account is active or as needed to provide you Services.
- Statutory Records: Payroll and financial records are retained for the period mandated by local tax laws (typically 7 years), after which they are securely deleted or anonymized.
7. Your Data Protection Rights
Depending on your jurisdiction (e.g., Malaysia PDPA, Singapore PDPA, or GDPR), you may have the following rights:
- Right to Access: You can request copies of your personal data.
- Right to Rectification: You can request correction of inaccurate or incomplete data.
- Right to Erasure: You can request deletion of your data, subject to our legal obligations to retain financial records.
Note for Employees: If you are an employee of one of our Clients, please contact your employer directly for requests regarding your personal data, as they are the Data Controller.
8. International Data Transfers
Since we operate regionally across Asia, your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. We ensure appropriate safeguards are in place for such transfers.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Email: enquiry@yespaygroup.com
- Address: 391A Orchard Road, Ngee Ann City Tower A #23-03 Singapore 238873
- Phone: +65 6738 6228
