Privacy Policy

Last updated: 27 July 2026

This Privacy Policy explains how CySlip Ltd(“CySlip”, “we”, “us”) collects, uses and protects personal data in connection with the CySlip scheduling and time-tracking service (the “Service”). We are committed to processing personal data in accordance with the EU General Data Protection Regulation (GDPR) and the data-protection law of the Republic of Cyprus.

1. Controller and processor roles

For personal data about a Customer’s employees that is entered into the Service (such as names, PINs, schedules and attendance records), the Customer is the data controller and CySlip acts as a data processor, processing that data only on the Customer’s documented instructions to provide the Service.

For data we collect directly about visitors to our website and the individuals who administer a Customer account (such as account and billing contacts), CySlip is the data controller.

2. Personal data we process

  • Account & contact data: name, work email, business name and role of the person who signs up or is invited to administer the account.
  • Employee scheduling data (as processor): employee names, roles/departments, availability, clock-in PINs, clock-in/out timestamps, attendance and lateness records, and annual-leave and day-off requests.
  • Billing data: subscription plan and payment details, which may be handled by a third-party payment processor.
  • Technical & usage data:IP address, device and browser information, and product-analytics data about how the Service is used — pages and features opened, actions taken and errors encountered. For signed-in administrators this is linked to their name and work email so that usage can be attributed to one account.

3. How and why we use personal data

  • to provide, maintain and secure the Service;
  • to enable scheduling, PIN clock-in/out, attendance insights and leave management for the Customer;
  • to process subscriptions, billing and support requests;
  • to understand how the Service is used and to improve its features, reliability and usability;
  • to communicate service updates and, where permitted, relevant product information;
  • to comply with legal obligations and to establish, exercise or defend legal claims.

4. Legal bases (GDPR Article 6)

Where CySlip is the controller, we rely on: performance of a contract (to provide the Service and process payments); our legitimate interests (to secure, improve and market the Service, balanced against your rights); consent (for optional marketing or non-essential cookies, where required); and compliance with legal obligations. Where CySlip acts as a processor, the Customer is responsible for establishing the lawful basis for processing employee data.

Product analytics about signed-in administrators rests on our legitimate interest in maintaining and improving the Service, not on consent, so accepting our Terms & Conditions is not what makes it lawful. You can object to it at any time (see section 9), and we will stop unless we have compelling grounds that override your rights.

5. Sharing and sub-processors

We do not sell personal data. We share it only with: service providers who help us operate the Service (for example cloud hosting, payment processing, demo scheduling, and PostHog for product analytics on its EU-hosted infrastructure) under appropriate data-processing terms; and authorities where required by law. A current list of sub-processors is available on request.

6. International transfers

Personal data is processed within the European Economic Area (EEA) where possible. Where data is transferred outside the EEA, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. Retention

As a processor, we retain Customer Data for the duration of the Customer’s subscription and delete or return it within a reasonable period after termination, unless retention is required by law. As a controller, we keep account, billing and technical data only for as long as necessary for the purposes described above and to meet legal and accounting obligations.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit and PIN-based access to clock-in kiosks. No system is completely secure, and we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, individuals have the right to access, rectify, erase, restrict or object to the processing of their personal data, the right to data portability, and the right to withdraw consent. Because much of the employee data is controlled by the Customer, requests relating to that data should usually be directed to the relevant employer; we will assist the Customer in responding. To exercise rights in respect of data for which CySlip is the controller, contact us using the details below.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus or your local supervisory authority.

10. Cookies and similar technologies

Our website uses strictly necessary cookies to function. We also use Google Analytics (provided by Google Ireland Limited) to understand how the site is used, which sets analytics cookies and shares usage data with Google. Google Analytics is only loaded after you accept it in the cookie banner, and declining leaves the site fully usable. You can change your mind at any time by clearing this site’s data in your browser, and you can control cookies generally through your browser settings.

Inside the web application we use PostHog, hosted in the European Union, to measure product usage. It stores an identifier in your browser so that repeat sessions from the same administrator can be recognised. This is first-party analytics used solely to run and improve the Service; it is not shared with advertising networks.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email, and the “last updated” date above will be revised.

12. Contact us

For any privacy question or to exercise your rights, contact us at privacy@cyslip.com or write to CySlip Ltd, Nicosia, Cyprus.