Privacy Policy

This Privacy Policy explains how personal information is handled in connection with Awayly, operated by Michael Wood | Web & Automation.

Who we are

Awayly is a holiday and absence management software product developed and operated in the United Kingdom by Michael Wood | Web & Automation. Privacy enquiries can be sent to hello@awayly.co.uk.

Information we may collect

• Public website enquiry details and correspondence.
• Account information such as names, business names, email addresses and roles.
• Organisation settings, departments, working patterns and holiday allowances.
• Time-off information entered by customers or authorised users, including dates, types, notes, approval decisions and related records.
• Billing identifiers, subscription status, invoice references and payment-event information from Stripe.
• Technical information such as IP address, browser information, security logs, session information and error logs.
• Optional analytics data where consent has been given.

Controller and processor roles

For the public Awayly website, account administration, billing and our own customer relationship, Michael Wood | Web & Automation acts as a data controller for relevant personal information.

For employee and absence information entered into Awayly by a customer organisation, that customer is normally the data controller and Michael Wood | Web & Automation acts as a processor on the customer’s behalf. Customers are responsible for their lawful basis, notices, access rules and employment-data obligations.

How we use information

• To create and administer Awayly accounts.
• To provide holiday, absence, approval and calendar functionality.
• To send operational emails and account notifications.
• To provide support and respond to enquiries.
• To manage trials, subscriptions, invoices and payment status.
• To protect accounts, investigate errors, prevent abuse and maintain security.
• To improve performance and usability.
• To meet accounting, tax, legal and regulatory obligations.

Lawful bases

Depending on the context, we rely on contract, legitimate interests, consent and legal obligation. Customer organisations are responsible for determining their own lawful basis for employee data they enter into Awayly.

Payments and Stripe

Stripe processes subscription payments. Stripe may receive billing and payment information needed to process transactions, prevent fraud and operate its payment services. Awayly does not store full card numbers or card security codes on its own servers. Stripe’s own privacy policy applies to its processing.

Cookies and analytics

The public website uses essential browser storage to remember cookie choices. Optional analytics only loads if you consent. See the Cookie Policy for details.

Service providers

We may use trusted providers for hosting, infrastructure, security, backups, email delivery, payments, analytics (where consented to), professional advice and other services reasonably needed to operate Awayly. We do not sell personal data to advertisers.

International transfers

Some service providers may process information outside the United Kingdom. Where relevant, we use providers and transfer mechanisms intended to provide appropriate safeguards.

Security

We use reasonable technical and organisational measures designed to protect information, including HTTPS, access controls, password hashing, secure sessions, restricted administration, software updates and operational monitoring. No online service can guarantee absolute security.

Retention

We keep information only as long as reasonably necessary for the purposes for which it is processed, including active service delivery, support, security, legal claims, accounting and statutory obligations. Customer platform data may be retained for a limited period after account closure before deletion or anonymisation.

Your rights

Depending on the circumstances, UK data-protection law may give you rights including access, correction, deletion, restriction, objection, portability and withdrawal of consent. Where your data was entered by your employer or another Awayly customer, contact that organisation first because it will normally be the controller.

Complaints

Please contact us first if you have a privacy concern. You may also have the right to complain to the UK Information Commissioner’s Office (ICO).

Changes

We may update this policy as Awayly develops, providers change or legal requirements evolve. The latest version will be published on this page.

Contact

Email: hello@awayly.co.uk
Operator: Michael Wood | Web & Automation

Business address: 7 Smiths Croft, Wath Upon Dearne, Rotherham, S63 6GN, United Kingdom