Privacy Policy

Your privacy at WorkEddy

WorkEddy is built to help organizations identify ergonomic risk early, improve workplace safety, and manage assessment information responsibly. We know that the data handled through our website and platform can include sensitive workplace content, so we are committed to transparency, controlled access, thoughtful retention, and responsible use.

This Privacy Policy explains how WorkEddy collects, uses, stores, shares, and protects personal data when you visit WorkEddy.com, request a demo, create an account, use our platform, upload content, receive support, or interact with us in any other way.

If you use WorkEddy through your employer or another organization, that organization may control some of the data processed within the platform. In those cases, their internal privacy notice may also apply.

1. Who we are

WorkEddy is a workplace ergonomics and safety platform that helps organizations assess risk, support prevention efforts, improve documentation, and strengthen compliance workflows.

For privacy purposes, WorkEddy may act in two different roles:

1. As a data controller, we decide how to use personal data collected for our own business operations, such as website administration, account management, support, security, billing, and communications.
2. As a data processor, we process data on behalf of a customer organization that uses WorkEddy for workplace assessments, reporting, and related operational purposes.

2. Defined terms

For this Privacy Policy, the following terms have the meanings below:

• Account Data means information used to create, manage, and secure a user account, such as name, email address, login credentials, company name, and role.
• Customer means a company, employer, institution, or other organization that purchases or uses WorkEddy.
• Personal Data means any information that identifies, relates to, describes, or can reasonably be linked to an individual.
• Platform Data means information entered, uploaded, generated, or stored within the WorkEddy platform, including assessments, reports, observations, files, images, and related records.
• Services means WorkEddy.com, the WorkEddy platform, support services, communications, and related offerings.
• Uploaded Content means any image, video, document, note, report, task record, or other material submitted to WorkEddy by a user or customer.
• User means any individual who visits our website, creates an account, uses the platform, requests a demo, or otherwise interacts with WorkEddy.
• You means the person reading this Privacy Policy or the organization you represent, depending on the context.

3. Information we collect

We collect information in the following categories:

A. Information you provide directly

This may include:

• full name
• work email address
• phone number
• company name
• job title
• account credentials
• billing or payment related details
• communications you send to us
• demo request information
• onboarding details
• support requests
• any information you submit through forms or platform workflows

B. Platform and workplace assessment data

Depending on how a customer uses WorkEddy, the platform may process:

• task descriptions
• workstation observations
• ergonomic assessment records
• incident or near miss information
• corrective action records
• training related information
• compliance documentation
• images or video used for ergonomic review
• worker or employee identifiers where included by the customer
• notes, reports, recommendations, and follow up records

We encourage customers to limit personal data to what is genuinely needed and to use coded identifiers where appropriate.

C. Information collected automatically

When you visit our website or use our services, we may automatically collect:

• IP address
• browser type
• operating system
• device information
• access dates and times
• log data
• page interactions
• usage data
• cookie data
• security event information

D. Information from other sources

We may receive information from:

• your employer or organization
• identity and access providers
• payment service providers
• analytics providers
• customer relationship systems
• integration partners authorized by you or your organization

4. How we use information

We use personal data to operate, secure, improve, and support WorkEddy. This includes using information:

• to provide and maintain the services
• to create and manage user accounts
• to authenticate users and control access
• to process ergonomic and workplace assessment activities
• to generate reports, dashboards, insights, and recommendations
• to support onboarding, implementation, and customer success
• to respond to inquiries and support requests
• to send service updates and administrative communications
• to monitor reliability, performance, and security
• to investigate misuse, fraud, or unauthorized activity
• to comply with legal and regulatory obligations
• to improve product design, functionality, and user experience
• to send marketing communications where permitted by law

5. Our approach to image, video, and AI supported analysis

Some WorkEddy features may allow customers to upload images, video, or observation data for ergonomic review and safety analysis. Because workplace recordings and visual assessment data can be sensitive, we aim to handle them with care.

Our approach is guided by the following principles:

1. Purpose limitation — Uploaded content is processed to support ergonomic assessment, prevention planning, reporting, and related workplace safety functions.
2. Minimum necessary collection — We encourage customers to upload only what is needed for assessment and prevention purposes.
3. Controlled access — Access to uploaded content should be limited to authorized users with a legitimate operational reason.
4. Human oversight — Automated analysis and AI supported features are intended to assist review, not replace informed human judgment.
5. Retention control — Customers should be able to set retention rules so raw media is not kept longer than needed.
6. Reduced identification where appropriate — Where suitable and technically available, workflows may support limited identifiers, blurred visuals, or restricted metadata exposure.

6. Legal basis for processing

Where required by applicable law, WorkEddy processes personal data on one or more of the following grounds:

• consent
• performance of a contract
• compliance with a legal obligation
• protection of vital interests where applicable
• legitimate interests, provided those interests do not override individual rights and freedoms

If WorkEddy processes personal data on behalf of a customer organization, that customer is generally responsible for identifying the lawful basis for the information it submits to the platform.

For users and customers in Nigeria, WorkEddy aims to process personal data in a manner consistent with applicable data protection requirements, including the Nigeria Data Protection Act 2023 and related regulatory expectations.

7. Cookies and related technologies

WorkEddy uses cookies and similar technologies to support website and platform functionality, security, analytics, and performance improvement.

These technologies may be used to:

• keep sessions active
• remember preferences
• understand website usage
• improve performance
• support security controls
• measure communication effectiveness

You may control cookies through your browser settings. Please note that disabling certain cookies may affect how the site or platform functions.

8. How we share information

We do not sell personal data.

We may share personal data in the following circumstances:

• with service providers that support hosting, analytics, communications, billing, customer support, or security
• with the customer organization that administers your access to WorkEddy
• with professional advisers such as lawyers, auditors, consultants, or insurers where appropriate
• with regulators, courts, law enforcement, or public authorities when required by law or valid legal process
• in connection with a business transaction such as a merger, investment, acquisition, restructuring, or sale of assets
• with your consent or at your direction

Where third parties process personal data on our behalf, we expect them to use that data only for authorized purposes and to maintain appropriate confidentiality and security safeguards.

9. International transfers

WorkEddy may store or process personal data in Nigeria or in other countries where we or our service providers operate.

Where personal data is transferred across national borders, we take steps designed to protect it through reasonable contractual, technical, and organizational safeguards. These measures may include vendor review, controlled access, data handling obligations, and security protections appropriate to the type of information involved.

10. Data retention

We retain personal data only for as long as reasonably needed for the purposes described in this Privacy Policy, including to:

• provide the services
• maintain records and audit logs
• support security and troubleshooting
• comply with legal, regulatory, and contractual obligations
• resolve disputes
• enforce our agreements

Retention periods may vary based on the type of data, customer configuration, legal requirements, and operational need. When information is no longer required, we aim to delete it, anonymize it, or securely dispose of it.

11. Data security

WorkEddy uses technical, administrative, and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include:

• role based access controls
• authentication protections
• encryption in transit and, where appropriate, at rest
• audit logging
• system monitoring
• vendor review procedures
• confidentiality obligations
• incident response procedures

No method of transmission or storage can be guaranteed to be fully secure. Even so, we work to maintain protections appropriate to the nature and sensitivity of the data we handle.

12. Your privacy rights

Depending on your location and the role WorkEddy plays in relation to your personal data, you may have the right to:

• request access to your personal data
• request correction of inaccurate or incomplete information
• request deletion in certain circumstances
• object to certain processing
• request restriction of processing in certain situations
• request data portability where applicable
• withdraw consent where processing is based on consent
• lodge a complaint with a relevant supervisory authority

If your data is processed through WorkEddy by your employer or another organization, we may direct your request to that organization where appropriate.

To submit a privacy request, please contact us using the contact details below.

13. Customer responsibilities

If you are a customer using WorkEddy, you are responsible for ensuring that:

• you have the right to submit the data you upload to the platform
• you provide any notices required to workers, contractors, or users
• you rely on an appropriate lawful basis for processing
• you configure access, retention, and administrative settings responsibly
• you use WorkEddy in a lawful and ethical manner

14. Children

WorkEddy is intended for business and organizational use. It is not directed to children, and we do not knowingly collect personal data from children through our public website or business platform in a consumer context.

If we learn that personal data has been collected from a child inappropriately, we will take reasonable steps to delete it as required.

15. Third party links and services

Our website or platform may include links to websites, applications, or services operated by others. WorkEddy is not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before sharing information with them.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, or operations. When we make updates, we will revise the effective date shown at the top of this page.

Where appropriate, we may also provide additional notice of material changes.

17. Contact us

If you have questions, requests, or concerns about this Privacy Policy or WorkEddy's handling of personal data, please contact us at: