Privacy Policy

This website and the WageFlow service are operated by The Business Consortium Ltd (company number 16636529). Registered office: 86-90 Paul Street, London EC2A 4NE, United Kingdom. Contact: enquiries@thebusinessconsortiumltd.co.uk.

"T.B.C." is the house mark of The Business Consortium Ltd, used before each product name across our product family (for example, T.B.C. WageFlow, T.B.C. PeopleFlow and T.B.C. AccountsFlow).

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights. Organisations must provide this type of information under UK GDPR transparency requirements.

Marketing website enquiries

For enquiries and communications you send to us, we act as a data controller.

WageFlow payroll data

For payroll and employee data uploaded into WageFlow by a business customer, the customer typically acts as the data controller, and we act as a data processor processing that data on the customer's instructions to provide the service.

We may collect the following categories of data, depending on how you use the website or service.

Website enquiries

Name, business name, email address, phone number if you provide it, and the contents of your message.

Account and service data

Account identifiers, login and security metadata, company settings you enter, and support communications.

Payroll and employee data

Data entered by the customer to run payroll, such as employee identifiers, payroll inputs and outputs, statutory calculations, and payroll history. This data may include special category data depending on what the customer inputs.

Technical data

IP address, device and browser information, and logs used for security and service reliability.

UK GDPR requires us to explain purposes and lawful bases. The exact lawful basis depends on the context. Typical lawful bases include contract, legal obligation, and legitimate interests.

Responding to enquiries

Purpose: reply to your demo or pilot enquiries, and manage sales communications. Lawful basis: legitimate interests, or steps to enter into a contract where relevant.

Providing the service

Purpose: provide payroll software functionality and customer support. Lawful basis: contract where you are the customer. For payroll data processed for customers, we act as processor on the customer's instructions.

Security and fraud prevention

Purpose: protect accounts, prevent abuse, investigate incidents. Lawful basis: legitimate interests and, where applicable, legal obligations.

Legal and compliance

Purpose: comply with legal obligations, resolve disputes, and enforce terms. Lawful basis: legal obligation and legitimate interests.

If we rely on consent for any optional processing, we will tell you at the point of collection and you can withdraw consent at any time.

We share personal data only where necessary to run the website or provide the service, for example with hosting, database, email, and security providers. We require appropriate contractual protections where processors are used.

If any service providers process data outside the UK, we will use appropriate safeguards, such as approved transfer mechanisms. If you require details of sub-processors or transfer safeguards, contact us.

We keep personal data only as long as needed for the purposes set out in this policy. Payroll records often need to be retained for statutory and operational reasons. Where we act as processor, retention may be controlled by the customer's instructions, subject to legal requirements.

Where appropriate, we may retain information longer for security, audit, and dispute resolution.

You may have rights including access, correction, deletion, restriction, objection, and data portability. Some rights depend on context and lawful basis. If we process payroll data as processor, we will assist the customer (controller) with requests where required.

You also have the right to complain to the Information Commissioner's Office (ICO). ICO expects privacy notices to explain rights and how to complain.

Cookies and similar technologies may be used to keep the site and service working, for example for authentication and security. UK rules require clear information and consent for non-essential cookies. Essential cookies do not require consent where strictly necessary for the service you request.

If we add analytics or marketing cookies, we will provide a cookie notice and request consent before setting them.