Legal
Privacy Policy
Last updated May 2026
This summary explains how Celtucom (“we”, “us”) handles personal data in the Celtucom workforce management platform. It is provided for transparency and does not replace the data processing agreement with your organization, which governs the processing of your employees' data.
Who controls your data
When your organization uses Celtucom, your employer is the data controller for employee data and Celtucom acts as the data processor, processing data only on your employer's instructions.
What we process
To deliver the service we process account details (name, email, role), work data (shifts, time logs, time-off, tasks, messages) and approximate location captured at clock-in for attendance verification. That location capture is on by default and your organization can switch it off; requiring you to share your location is a separate setting that is off by default. We do not sell personal data.
This policy covers the platform. How visits to this website are measured is set out in our cookie statement.
How we protect it
Data is encrypted in transit and at rest, access is enforced with row-level security and role-based permissions, and changes to sensitive records are recorded in audit logs. See our security overview for details.
Your rights
Subject to applicable law (including the GDPR), you may request access to, correction of, or deletion of your personal data. Because your employer is the controller, please direct requests to them; we will assist them in fulfilling lawful requests. Celtucom supports data export and account deletion, with retention of records (such as payroll-relevant time logs) only where legally required.
Contact
Questions about this policy can be sent to info@celtucom.com.