EZ-BMS
Business Management Software

Privacy Policy

Last updated: 22 September 2026

This Privacy Policy explains how personal information is handled when EZ-BMS Business Management Software and the EZ-BMS mobile application (together, “EZ-BMS”) are used.

For employees and other organisation users: your employer or other organisation that provides your EZ-BMS account normally decides why your work-related personal information is used. Questions about your employment records, corrections, retention or access should normally be raised with that organisation first.

1. Who is responsible for your information?

EZ-BMS is a business management service operated by EZ Management Ltd. Customer organisations use EZ-BMS to manage their own business and workforce information. For personal information entered or managed by a customer organisation, that organisation will generally act as the controller (or equivalent decision-maker under applicable privacy law), while EZ-BMS processes that information to provide the service.

Where EZ Management Ltd determines the purpose of processing—for example service security, administration, account operation or legal compliance—it may act as a controller for that processing.

2. Information EZ-BMS may process

The information processed depends on the modules enabled by an organisation, the user's permissions and how the service is configured. It may include:

  • Account and identity information: name, email address, username, user/account identifiers, role, permissions and organisation membership.
  • Workforce information: department, work location, employment-related settings and manager/team relationships configured by the organisation.
  • Time & Attendance information: clock-in and clock-out events, break events, worked time, overtime, lateness and attendance exceptions.
  • Schedule and leave information: work schedules, planned hours, leave allowances, leave requests, dates, status and notes supplied with a request.
  • Project information: projects assigned or available to a user, project time entries and related activity.
  • Notifications and service records: in-app notifications, read/dismissed status and records needed to deliver the service.
  • Location information: precise device location may be captured when a user performs a clocking action where the organisation has enabled location verification. EZ-BMS does not use this feature for continuous background location tracking.
  • Security and technical information: authentication/session information and technical records reasonably required to secure, operate, diagnose and protect the service.
  • Other business information: information entered into licensed EZ-BMS modules by authorised users as part of their organisation's use of the service.

3. How information is used

Personal information is used to provide and secure EZ-BMS functionality, authenticate users, apply permissions, record attendance and working time, provide schedules and leave functions, record project time, deliver notifications, provide manager views where authorised, maintain audit and security records, troubleshoot the service, and meet applicable contractual or legal requirements.

EZ-BMS does not use employee information or precise clocking location for third-party advertising and does not sell personal information to data brokers.

4. Location information

If an organisation enables location verification for Time & Attendance, the mobile application may request permission to access the device's location when a relevant clocking action is performed. Location is associated with that work/attendance event where required by the organisation's configuration. Permission is controlled through the device operating system. Denying location permission may prevent a location-required clocking action from completing.

EZ-BMS is not designed to continuously track a user's location in the background.

5. Sharing and service providers

Information is available to authorised users within the relevant customer organisation according to their role, permissions and management scope. EZ-BMS may also use infrastructure and technology providers where necessary to host, secure, maintain or deliver the service. Providers are expected to process information only as necessary to provide their services and subject to appropriate contractual and security requirements.

Information may also be disclosed where required by law, regulation, court order, or where reasonably necessary to protect the rights, security and integrity of EZ-BMS, its customers or users.

6. Data security

EZ-BMS uses technical and organisational safeguards designed to protect information, including authenticated access, role and permission controls, tenant separation, secure transport, audit controls and restricted access to administrative functions. No internet-based service can guarantee absolute security.

7. Data retention and deletion

Customer business and workforce records are retained according to the customer organisation's requirements, the EZ-BMS service agreement, configured retention practices and applicable legal obligations. Security, audit, backup and transaction records may be retained for an appropriate period where necessary for security, recovery, dispute handling or legal compliance.

Users seeking deletion or correction of organisation-controlled employment or workforce records should normally contact their employer or organisation administrator. Where appropriate, EZ-BMS will assist customer organisations with valid privacy requests.

8. Your privacy rights

Depending on where you live and the circumstances of the processing, you may have rights relating to access, correction, deletion, restriction, objection, portability or withdrawal of consent. These rights can be subject to legal exceptions, including requirements to retain employment, financial, audit or other records.

If your account is provided by an employer or another organisation, contact that organisation first for requests concerning information it controls. Privacy requests concerning processing controlled directly by EZ Management Ltd can be raised through the normal EZ-BMS support/contact channel supplied to your organisation.

9. Children

EZ-BMS is a business and workforce management service and is not directed to children as a consumer service. Customer organisations are responsible for ensuring that accounts are created and information is processed lawfully for their workforce and users.

10. International processing

Where service providers process information outside the user's country, appropriate safeguards will be used where required by applicable data-protection law.

11. Changes to this policy

This policy may be updated as EZ-BMS develops, legal requirements change or service providers change. The latest version will be published on this page with an updated revision date.

12. Contact

For information controlled by your employer or organisation, contact your organisation administrator or privacy contact. For questions specifically about the EZ-BMS service or this Privacy Policy, use the EZ-BMS support/contact channel provided to your organisation.

EZ-BMS — Business Management Software · Operated by EZ Management Ltd · Application version 6.3.92