Your data
Built for HR to sign off on.
We know piping employee data into a new tool is a big ask. Here's exactly what we take, where it lives, and how you get it back out.
Read-only sync
We pull only the fields needed to trigger a gift — name, work email, start date, birthday (day/month) and role. No salaries, no home addresses, no performance data.
UK-hosted, encrypted
Data is stored in UK/EU data centres, encrypted in transit and at rest. Access is limited to named staff and logged.
UK GDPR-compliant
We act as your data processor. A signed DPA and our list of sub-processors are available on request before you connect anything.
Yours to remove
Disconnect the HRIS at any time and we'll delete synced employee data within 30 days. Employees can opt out of gifts individually.
What we sync
MostWelcome reads a minimal, read-only set of fields from your HRIS: first name, last name, work email, job title, start date, and birthday (day and month only). We do not sync home addresses, phone numbers, salary, bank details, or any sensitive employment records.
Where it lives
Data is processed and stored in UK/EU data centres. All data is encrypted in transit using TLS 1.2+ and at rest using industry-standard encryption. Access is restricted to named members of the MostWelcome team and is logged.
Compliance
MostWelcome acts as a data processor under UK GDPR. We provide a standard Data Processing Agreement (DPA), a list of sub-processors, and answers to common security questionnaires on request.
Retention and deletion
When you disconnect your HRIS, we delete synced employee data within 30 days. Individual employees can ask to be excluded from gifts at any time by contacting their HR team or emailing us directly.
This page is maintained by MostWelcome Ltd. It describes our current practices and is not a third-party certification. For a DPA, sub-processor list or security questionnaire, email privacy@mostwelcome.co.uk.