Privacy Policy
Last updated: January 11, 2026
Future Mill Limited (“we”, “us”, or “our”) operates Badger HR (the “Service”).
This Privacy Policy explains how personal data is handled when organisations use Badger HR.
Privacy at a Glance
- Badger HR is a B2B HR platform used by employers
- Employers control employee data; we process it on their instructions
- We use personal data only to provide and operate the Service
- We do not sell personal data or use HR data for advertising
- Employees should contact their employer about their data
- Questions can be sent to hello@badgerhr.com
Who This Policy Is For
This Privacy Policy applies to:
- Visitors to our website
- Customer administrators and authorised users
- Employees and contractors whose data is processed in Badger HR on behalf of our customers
Badger HR is intended for business use only.
Roles and Responsibilities
When personal data is processed through Badger HR:
- The customer (employer) is the data controller for employee and workforce data
- Future Mill Limited is the data processor for that data
For website, account, and billing data, Future Mill Limited acts as the data controller.
Information We Collect
Account and Administration Data
When accounts are created and managed, we collect:
- Name and work email address
- Company name and role
- Login credentials
- Billing and subscription information
Employee and Workforce Data
Customers may upload and manage HR-related information, including:
- Names and contact details
- Employment and role information
- HR documents and records
- Absence and policy acknowledgement data
- Emergency contact details
This data is provided and controlled by the customer.
Usage and Technical Data
We collect limited technical information, such as:
- IP address and device information
- Browser type and usage patterns
- Pages visited and actions taken within the Service
Cookies
We use cookies and similar technologies to keep users signed in and remember preferences.
We do not use cookies for advertising.
How We Use Personal Data
We use personal data to:
- Provide, operate, and maintain the Service
- Authenticate users and secure accounts
- Process payments and manage subscriptions
- Communicate service updates and support responses
- Monitor usage to improve reliability and performance
We do not use employee HR data for marketing, advertising, or profiling.
Legal Bases for Processing
Where we act as a data controller, we process personal data on the following bases:
- Contract – to provide the Service
- Legitimate interests – to secure, maintain, and improve the Service
- Legal obligation – for accounting and regulatory compliance
Where we act as a data processor, we process personal data only on the customer’s documented instructions.
Data Retention
- Account and billing data is retained for the duration of the customer relationship and for a limited period afterwards
- Employee HR data is retained according to the customer’s instructions and contractual terms
- Backup data is retained for a limited period for disaster recovery purposes
Data Security
We apply reasonable technical and organisational measures designed to protect personal data, including:
- Encryption in transit using TLS/SSL
- Encryption at rest for certain personal data
- Logical access controls and monitoring
No system is completely secure, and absolute security cannot be guaranteed.
Data Sharing
We do not sell personal data.
We may share data with:
- Trusted service providers who support hosting, infrastructure, and email delivery
- Authorities where required by law
- A successor organisation in the event of a merger, acquisition, or sale
A current list of subprocessors is available on our Subprocessors page.
International Data Transfers
Personal data may be processed outside the UK or EU.
Where this occurs, appropriate safeguards such as standard contractual clauses are used.
Your Rights
Customers and Account Users
Depending on applicable law, you may have rights to access, correct, or delete your personal data. Requests can be made by contacting us.
Employees and Workers
If your data is processed in Badger HR by your employer, your employer is responsible for responding to data protection requests. We will redirect requests where appropriate.
Children’s Data
Badger HR is not intended for use by individuals under the age of 16.
Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website or within the Service.
Contact Us
If you have questions about this Privacy Policy or about how personal data is handled, you can contact us at:
Email: hello@badgerhr.com
If you are an employee whose data is processed through Badger HR, please contact your employer in the first instance.