- The information we collect and how we use it
- How we protect your information
- Sale of business
- Updating your details
- Your consent
- Google Analytics
- Security Standards
- How to contact us
Youatwork Limited (Registered in England with number 4234654) and Youatwork Financial Services Limited (Registered in England with number 6503351) of Hertsmere House, 2 Hertsmere Road, London, E14 4AA.), are committed to ensuring that your privacy is protected.
1. The information we collect and how we use it
When you or your employees register to use our web-site and associated employee-facing web-sites we will request information including name and e-mail address. We may also request other limited information about you or your business. We, our agents and subcontractors may check some of the information that you provide to us against third party databases to confirm that it is accurate.
We gather and use this information to allow us to process each registration and provide you and your employees with our services. We, our agents and sub-contractors may also use this information to communicate with you on any matter generally relating to the provision of our services. Any calls that you make to our customer team may be recorded and the information obtained used for the purposes of our business management, training and security. You will always be able to see and amend the registration information we hold about you by contacting us at Youatwork Limited, Hertsmere House, 2 Hertsmere Road, London, E14 4AA.
When your employees place an order with a supplier via our site that supplier may send back to us information about your employees and your order. We may also be provided with data, including personal data, relating to fulfilment of the order and any complaint your employees may make. We may use that data in accordance with this policy, including to monitor site usage, supplier performance and customer satisfaction. On occasions we carry out surveys or other promotional activities which may be for our own benefit or for more general interest, and may collect further information about you or your employees in connection with them. Participation in any survey is entirely optional.
Our use of information gathering technologies
A cookie is a small piece of information that a web site puts on your hard disk or stores in your computer's memory so that it can remember something about you at a later time. A cookie records your preferences when using a particular site, ensuring that you are not shown the same information and/or are only shown information you have indicated that you are interested in. In order to use our site you must agree to let cookies be saved on your computer's memory as they are an essential part of the site navigation.
Our site uses "in-memory" cookies which essentially remember, during any one visit to the site, who a user is between page clicks, so that we can deliver personalised information and navigation by shaping the information you receive. Since each user has individual access rights to areas of the site we must be able to identify users at all times. As soon as your browser is shut down or you log out of our site, any cookies stored on your computer from our web site will expire. Each time you enter our site you will be given a new "in-memory" cookie. We reserve the right to use other tracking technologies in the future.
We (or our customer service agencies) may use the information we collect about you using cookies to monitor site usage, supplier performance and customer satisfaction or for other research and analytical purposes, in order to improve and better tailor the services we provide and to decide which customers to include in any promotional campaigns we may run. We or our agents and sub-contractors may occasionally contact you including by post, email or telephone to ask you for your feedback and comments on our services.
We may also use aggregate information and statistics for the purposes of monitoring web site usage in order to help us develop and improve our site and our services and we may provide such aggregate information to third parties. These statistics will not include information that can be used to identify any individual.
We and our group companies may also wish to provide you with information about special features of our web site or any special service or products which we think may be of interest to you. We may also want to provide you with related information from third parties which we think may interest you. If you would rather not receive such information from us, please log on to the website and update your personal information in the "My Page" section of the site to inform us of this.
All personal information supplied by you will be treated in confidence by us and our Group companies and will not be disclosed to any third parties except where your consent has been received or where required by law. In order to provide you with products and services this information will be held in the data systems of our Group companies or our agents or sub-contractors.
2. How we protect your information
We capture the information we collect through our site over a secure link using recognised industry standard techniques which encrypt data while travelling over the internet. When you access certain pages of our site which involve the transmission of confidential information over the Internet, your computer's browser will be provided with an electronic certificate confirming that you have accessed our site and communications between you and us will be encrypted. We recommend that you use the facilities of your computer's browser to confirm which pages are secured in this way.
Firewalls are used to attempt to block unauthorised traffic to the servers that host our site and the actual servers are located in a secure location, which can only be accessed by authorised personnel.
We also aim to keep the information we have about you confidential. Our internal procedures cover the storage, access and disclosure of that information.
You should ensure you keep your password confidential and remember to sign out when not using the site to prevent unauthorised access.
3. Sale of business
In the event that our business is sold or integrated with another business (such as in a joint venture arrangement) the details we have about you may be disclosed to our advisers and any prospective purchasers' advisers, and will be passed on to the new owners of the business.
4. Updating your details
To update any of your details, please log on to the site and update your personal information in the "My Details" section. Alternatively, you may let us know the correct details by sending a letter to youatwork Limited, Hertsmere House, 2 Hertsmere Road, London, E14 4AA.
5. Your consent
6. Google Analytics
7. Security Standards
Hundreds of companies trust us to manage their benefits & rewards programmes, so our top priority is to ensure that all transaction and sensitive data is kept secure at all times.
We maintain high standards of data security and have implemented key international standards of best practice in online and data security at our Data Centre and where data held by our systems can be accessed.
- PCI Data Security Standard
- SAS 70 Type II*
We take an active role in the overall reduction of identity theft and fraud on the Internet by ensuring the security of our IT systems, personnel and infrastructure.
Our employees are trained in all aspects of web application security, including infrastructure vulnerabilities, cross-site scripting, secure data storage, and using the software development lifecycle to maintain and improve security.
All transaction and credit card information entering Youatwork Ltd systems is encrypted using 128-bit SSL certificates from VeriSign. No sensitive information is ever passed unencrypted in a web browser to Youatwork systems. You can be completely secure in the knowledge that nothing you enter as part of a secure Youatwork transaction can be examined, used or modified by any third parties attempting to gain access to sensitive information.
Encryption and data storage
At our Data Centre rigorous physical, electronic, and personnel security measures protect your data. Those measures are regularly assessed by Youatwork Ltd IT Management and our systems are scanned quarterly by Security Metrics, an official Visa Qualified Security Assessor.
Once on our systems, payment card and password data is encrypted and securely stored in our dedicated hosting facilities at our Data Centre. Our servers and network infrastructure are owned and used by Youatwork Ltd and are not shared with any other company or industry.
All sensitive information and authentication data passed to the Youatwork / Reward Compass web site in a web browser is encrypted and protected during transmission using SSL certificates from Verisign.
Links to banks
Youatwork Ltd authorises credit card transactions in partnership with Barclaycard Merchant Services (BMS). Any cardholder information sent to the banks and any authorisation message coming back is secure and cannot be tampered with.
If you have questions about security or privacy on our site please contact us using the link below.
*ISO27001 and SAS 70 Type II certifications are held by our hosting provider Rackspace UK under an intensive managed services agreement.
We will give you access to the web-site provided always that your employer has paid our licence fee, upgrades fees, administration fees, and any other fees (as applicable). We reserve the right to change our licence fees, upgrade fees, administration fees, and any other fees from time to time and will notify your employer accordingly.
9. How to contact us