For employers using PayAdjust — customise and provide to your employees
For Employers
As the data controller for your employees' personal data, you are required under UK GDPR to provide a privacy notice explaining how their data is processed. This template covers your use of PayAdjust. Replace all [EMPLOYER NAME] placeholders with your organisation's name before distributing to employees.
[EMPLOYER NAME]
This notice explains how [EMPLOYER NAME] processes your personal data for payroll purposes using the PayAdjust platform. [EMPLOYER NAME] is the data controller for your employment data. PayAdjust Ltd acts as our data processor.
This notice may be updated from time to time. We will notify you of any material changes.
To process your payroll, we collect and store the following data in PayAdjust:
If you do not provide required payroll information (such as your National Insurance number or bank details), we may be unable to pay you correctly or comply with our legal obligations to HMRC or your pension provider.
| Purpose | Lawful Basis |
|---|---|
| Calculating and paying your wages | Contractual necessity (employment contract) |
| Deducting tax and National Insurance | Legal obligation (PAYE Regulations 2003) |
| Pension auto-enrolment | Legal obligation (Pensions Act 2008) |
| Reporting to HMRC (RTI) | Legal obligation (PAYE Regulations) |
| Providing you payslip access | Legal obligation (Employment Rights Act 1996) and contractual necessity |
Payroll calculations (tax, National Insurance, pension contributions) are performed automatically based on data entered by [EMPLOYER NAME], but no solely automated decisions are made about you without human involvement.
Your core payroll data is stored in the United Kingdom. Some of our service providers may process data outside the United Kingdom. Where this occurs, appropriate safeguards such as UK International Data Transfer Agreements or adequacy regulations are in place to protect your data. Further details are available in PayAdjust's Privacy Policy.
PayAdjust implements appropriate technical and organisational security measures, including encryption of sensitive data, mandatory multi-factor authentication, and access controls. All data in transit is encrypted via TLS.
Under UK GDPR, you have the right to:
To exercise your rights, contact [EMPLOYER NAME]'s payroll team. If you have concerns about how your data is being handled, we encourage you to contact us first so we can resolve them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
For questions about how your payroll data is processed, contact:
Use Ctrl/Cmd + P to print this template