← Back to home

Privacy Policy

Last updated: September 1, 2026

You2Off ("we", "our", or "the service") is a time-off and leave management application. This policy describes how we collect, use, and protect your personal data when you use our service.

1. Data we collect

  • Account data: email address, first and last name, department, hire date, and a stored hash of your password (we do not store your actual password).
  • Leave data: leave requests (dates, type, optional reason), approval status, and leave balances (annual, sick, etc.).
  • Technical data: session identifier (cookie), IP address as processed by the server, and browser/device information used for session security.
  • Analytics data (only with your consent): pages viewed, approximate location derived from a truncated IP address, referring site, and general device and browser information, collected through Google Analytics 4. See section 4.

2. How we use your data

We use your data to provide the service: managing your account, processing leave requests, showing balances and calendars, and enabling managers and administrators to approve requests and run reports. We do not sell or share your personal data with third parties for marketing. Data may be processed by our hosting infrastructure to serve the application.

3. Legal basis (GDPR)

We process your data on the basis of contract (performance of the service you or your employer use) and, where applicable, legitimate interests (e.g. security, fraud prevention). Where required by law, we may rely on consent.

4. Cookies and sessions

Strictly necessary. We use a session cookie to keep you logged in. It is set with HttpOnly and SameSite protections, and (in production) Secure. It cannot be switched off, as the service does not work without it.

Analytics (optional). With your consent we use Google Analytics 4 to understand how the site is used — which pages are visited and how visitors arrive. This sets Google’s _ga cookies, which hold a randomly generated identifier and typically expire after two years. Analytics storage is disabled by default and is only enabled after you accept in the cookie banner; if you reject, no analytics cookie is set. You can change your choice at any time using the “Cookie settings” link in the footer.

Google Ireland Limited acts as our analytics processor and data may be transferred outside the EEA under Google’s standard contractual clauses. We do not use advertising cookies and we have not enabled Google Ads features or data sharing for advertising.

5. Retention and your rights

We retain your data while your account is active and as needed for legal or operational purposes. You have the right to access, rectify, and in certain cases erase or restrict processing of your data, and to data portability and to complain to a supervisory authority. See our GDPR Compliance page for more detail. To exercise your rights, contact your organisation’s administrator or the contact provided by the data controller (your employer or the entity operating You2Off).

6. Changes

We may update this policy from time to time. The "Last updated" date at the top will be revised when we do. Continued use of the service after changes constitutes acceptance of the updated policy.

This site uses a session cookie to keep you logged in, and analytics cookies only if you accept them. See our Privacy Policy.

We use a strictly necessary session cookie to keep you logged in. We would also like to set Google Analytics cookies to understand how the site is used. These are optional and are only set if you accept. See our Privacy Policy.