Privacy Policy.

1. Introduction

WorldStaffingpro Hire, onboard, and pay full-time employees and contractors in 180+ countries without setting up a local entity. Employer of Record, global payroll, benefits, and compliance in one platform. ("we", "us", "our") operates a global Employer-of-Record (EOR), payroll, and HR platform. This Privacy Policy explains what personal information we collect, why we collect it, and what rights you have over your data.

We act as a data controller for platform accounts and as a data processor for the payroll and HR data we handle on behalf of employer customers.

2. Information we collect

We collect the following categories of personal data:

• Account data — name, email, password hash, role, company affiliation.
• Onboarding data — government ID, tax forms (W-9, W-8BEN, local equivalents), bank details, address, phone number.
• Payroll data — salary, currency, timesheets, payslips, deductions, tax withholdings.
• KYC data — company registration documents, beneficial ownership, sanctions screening records.
• Communications — support tickets, email threads, in-app messages.
• Technical data — IP address, browser, session logs, audit logs of platform actions.

3. How we use your data

• Operate the platform (authentication, worker onboarding, payroll processing, payouts).
• Comply with local labour, tax, and financial-crime regulations (KYC/AML, statutory filings).
• Send transactional notifications (payslips, payment confirmations, security alerts).
• Provide customer support and resolve disputes.
• Detect fraud and unauthorised access.
• Improve our services through aggregated, anonymised analytics.

4. Legal basis (GDPR)

Where GDPR applies, we rely on: (a) contract performance to run the service you signed up for; (b) legal obligation for statutory payroll and tax reporting; (c) legitimate interest for fraud prevention and platform security; and (d) consent for marketing emails, which you can withdraw at any time.

5. Sharing your data

We share data only with:

• Payment gateways (Stripe, Paystack, Flutterwave) to process wallet top-ups and worker payouts.
• Local EOR entities and payroll bureaux in each country of employment.
• Tax authorities and regulators where legally required.
• Sub-processors under signed data processing agreements (cloud hosting, email delivery, SMS gateways, error monitoring).

We never sell your personal data.

6. International transfers

Because we operate globally, data may be transferred to and processed in countries outside your own. When transferring personal data from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or adequacy decisions.

7. Data retention

We retain personal data for as long as your account is active, and afterwards only as required by tax, employment, and anti-money-laundering law (typically 5–10 years for payroll and financial records). You may request deletion of non-mandatory data at any time.

8. Your rights

Subject to local law, you may:

• Access, correct, or delete your personal data.
• Object to or restrict processing.
• Request data portability in a machine-readable format.
• Withdraw consent for marketing communications.
• Lodge a complaint with your local data protection authority.

To exercise any of these, email privacy@remotepeople.example.

9. Security

We use industry-standard measures — encryption in transit and at rest, MFA, role-based access, quarterly penetration testing, SOC 2 Type II and ISO 27001 controls. No system is 100% secure, but we work continuously to protect your data.

10. Cookies

We use essential cookies for authentication and session management, and optional analytics cookies (Google Analytics) to understand product usage. You can opt out of analytics via your browser or our cookie banner.

11. Changes to this policy

We may update this policy occasionally. Material changes will be posted here and, where relevant, communicated via email at least 30 days before taking effect.