In order to deliver our service, Boundless collects the following data on individuals who are compliantly employed through our platform:

• Name ^2,4,5,6
• Address ^4,5,6
• Date of birth, gender, title ^5,6
• Email address ^2,5
• Phone number ⁵
• National identity numbers, insurance numbers and tax identifiers for country of employment and associated documentation where relevant ^3,5,6
• Emergency Contact details (name, relationship, phone number)
• Details of your bank account (BIC and IBAN) ¹
• Copies of passport you provide for identity verification and employment purposes ²
• Digitial imagary of your face ^{2, 3}
• Evidence of right to work in selected country ^3,5,6
• Data pertaining to your tax status, e.g. dependents, marital status ^5,6
• Documents related to your tax status ^3,6
• Information relating to your employment and employment contract such as salary, holiday allowances, bonuses, allowances, benefits.^4,6

¹ Items processed by 3rd party: Transferwise
² Items processed by 3rd party: Passbase
³ Items stored on AWS EU Servers
⁴ Items stored on 3rd party servers as well as our own: Juro (Contract Mgmt software)
⁵ Items shared with local tax authorities
⁶ Items shared with in country Payroll Partners in order to run payroll and pay employees

Transferwise: We share employees’ IBAN and BICs (or non EU equivalents) with Transferwise in order to make payroll payments.

Passbase: Service used for identity verification. Employees share a selfie video and a copy of their Passport to become verified.

Juro: Contract Management Platform. Used to compile employment contracts and as such holds data relating to the employee.

AWS Platform: All of our service is hosted on AWS with servers in the EU. This means that data is stored there but also that any logging which may access PII is also reported on there (EU servers).

Mailgun: Emails that come from our software are sent using this service. We do not include PII in our emails however this service has access to email addresses

Payslip.com: Used to manage payroll processing workflows and therefore holds data relating to the employee.

In Country Partners: These are a different company in each country, and we pass them necessary information in order to process payroll or deal with HR issues. We do not pass on emails, phone numbers or bank details where possible.

You directly provide Boundless with most of the data we collect. We collect data and process data when you:

• Register for our service.
• Use or view our website via your browser’s cookies.

Boundless may also receive your data indirectly from the following sources:

• The company hiring you via Boundless.

• Boundless collects your data so that we can provide the best service and:

  • Check your identity.
  • Check your right to work in the selected country.
  • Generate an employment contract for you.
  • Issue salary payments to you.
  • File tax returns and make tax payments to the local tax authorities on your behalf.
  • Make other payments on your behalf such as pension contributions and other allowable deductions.
  • Email you with special offers on other products and services we think you might like.

Boundless securely stores your data on our servers located in the European Union.

Any payroll carried out by us or our payment-processing partners will be encrypted using Secured Socket Layer technology or a secure virtual private network.

If you use a password for our website, you will need to keep this password confidential. Please do not share it with anyone.

Under anti-money-laundering laws Boundless needs to hold information about you and your transactions for five years.

Generally, Boundless will not hold your personal information for more than five years after our business relationship and your employer’s business relation with you has ended, unless we need to hold it for longer because of a potential or on-going claim or another legal reason.

Boundless would like to send you information about products and services of ours that we think you might like.

If you have agreed to receive marketing, you may always opt out at a later date.

You have the right at any time to stop Boundless from contacting you for marketing purposes or giving your data to other members of the Boundless Group.

If you no longer wish to be contacted for marketing purposes, please click here.

The Boundless website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Boundless keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 16 September 2020.

• If you have any questions about Boundless’ privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us. Email us at: dpo@boundlesshq.com

Should you wish to report a complaint or if you feel that Boundless has not addressed your concern in a satisfactory manner, you may contact the Data Protection Commissioner’s Office. The Data Protection Commission (DPC) is the national independent authority responsible for upholding the fundamental right of individuals in the EU to have their personal data protected. The DPC is the Irish supervisory authority for the General Data Protection Regulation (GDPR), and also has functions and powers related to other important regulatory frameworks including the Irish ePrivacy Regulations (2011) and the EU Directive known as the Law Enforcement Directive.

Webform: https://forms.dataprotection.ie/contact

Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland.