L&M Privacy Notice

1. Introduction & Overview

L&M ("we," "us," or "our") is committed to protecting the privacy of administrators, employees, and clients who interact with our websites (www.stafflm.com) and our mobile applications, including the L&M Staff application (collectively, our "Solutions").

This Privacy Notice outlines how we collect, use, store, and safeguard your Personal Information, as well as your rights regarding data access and deletion.

2. Personal Information We Collect

We collect Personal Information necessary to provide attendance tracking, service order management, and administrative functionality.

A. Account & Authentication Data

• Login Credentials: Email address and encrypted password (managed via secure authentication providers and never exposed on our servers).
• Profile Information: Full name, internal user identifier, assigned role, optional profile picture, and optional phone number.

B. Device Geolocation Data (Mobile App)

When using the L&M Staff mobile application, we may request access to your device's location services (android.permission.ACCESS_FINE_LOCATION and android.permission.ACCESS_COARSE_LOCATION):

• When Collected: Precise GPS coordinates (latitude/longitude) are captured only when an employee executes a check-in, check-out, or break entry.
• Purpose: To validate work site attendance and ensure accurate timekeeping and service billing for assigned clients.
• Optional Permission: Location collection is optional. Employees may decline or revoke location permissions in device settings and still record attendance; in such cases, attendance records are stored without GPS coordinates.

C. Technical & Device Information

• Network access (android.permission.INTERNET) is utilized to sync application data with our secure backend.

D. Data We Do NOT Collect

• We do not collect financial or payment details within the app, contact lists, photos/videos, private messages, or browser history. We do not use advertising identifiers, run third-party tracking scripts, or serve advertisements.

3. Purpose and Legal Basis for Processing

We process Personal Information for the following legal and business purposes:

• Authentication: Verifying user identity and managing account access.
• Workforce Management: Recording shift attendance (clock-in, clock-out, breaks) for work-time compliance and client agreements.
• Operations: Managing service orders, contract administration, and customer support.
• Legal Compliance: Fulfilling statutory labor laws, work-time tracking mandates, and regulatory obligations.

4. Third-Party Infrastructure & Data Processors

We do not sell, rent, or trade Personal Information. To operate our Solutions, we share data with trusted infrastructure providers who act as data processors bound by strict confidentiality obligations:

• Google Firebase / Google Cloud Platform (Google LLC): Used for database storage (Firestore/Realtime Database) and user authentication (Firebase Authentication). Data is hosted in the us-central1 (United States) region.

We may also disclose Personal Information if required by law enforcement, legal process, or competent government authorities.

5. Security Measures

We implement physical, organizational, and technical security measures—including HTTPS/TLS encryption for all data transmitted between the mobile application and our servers—to protect against unauthorized access, disclosure, or alteration.

6. Data Retention & Mandatory Account/Data Deletion

Retention

Attendance logs and profile data are retained while your employment or contractual relationship remains active, and subsequently for the statutory periods required under applicable labor laws. Expiry of required retention periods results in secure data deletion or anonymization.

Requesting Account & Data Deletion

In compliance with data protection laws and app store standards, you have the right to request the deletion of your account and associated Personal Information through either of the following methods:

1. Email Request: Send an email to gplaystore@stafflm.com with the subject line DATA DELETION REQUEST from your registered email address.
2. Administrator Request: Contact your organization's administrator directly to initiate an account removal.

Processing Time: Deletion requests are processed within 30 days. Please note that certain attendance or work-time records may be retained past account deletion to fulfill mandatory legal or statutory labor requirements.

7. Your Privacy Rights

Depending on your jurisdiction (including GDPR, CCPA, and local state regulations), you have rights regarding your Personal Information:

• Access & Portability: Request a copy of the data we hold about you.
• Rectification: Request corrections to inaccurate or incomplete data.
• Erasure & Restriction: Request deletion or restriction of data processing (subject to Section 6).

To exercise these rights, submit a written request to gplaystore@stafflm.com or privacy@stafflm.com.

8. Updates to This Policy

We may update this Privacy Notice periodically. Any modifications will be published at this web address with an updated revision date. Material changes will be communicated via the L&M Staff mobile application or direct communication.

9. Contact Us

For questions regarding this Privacy Policy or our data practices:

• App & Privacy Contact Email: gplaystore@stafflm.com
• General Corporate Privacy Email: privacy@stafflm.com

Mailing Address: