Privacy Notice

1. Who we are

Musterly is a workplace presence and safety service operated by Brix Systems Limited, trading as Musterly. We are registered in England and Wales under company number 17123063.

For privacy questions, contact us at privacy@musterly.io.

2. When we are controller or processor

Data protection law distinguishes between a controller, which decides why and how personal information is used, and a processor, which handles information on a controller's behalf.

• Musterly as controller: we decide how to use information submitted through this website, account and billing information, support enquiries, and optional analytics and advertising measurement data.
• Musterly as processor:when an organisation uses the application for its people, visitors, access events and workplace safety records, that organisation decides why the information is used. We process it on the organisation's instructions to provide Musterly.

3. Information we collect

Website enquiries

When you contact us or submit a website form, we collect your email address. You may also provide your name, company name, company size and the details of your enquiry. We use this information to respond to your enquiry and provide information about Musterly.

Accounts and organisations

We collect account names, email addresses, roles, organisation and site details, subscription information, settings, floor plans and integration configuration needed to provide the service.

Presence and safety information

Organisations may use Musterly to process workplace presence, door and access events, attendance information, roll-call responses, assigned safety roles and related timestamps. Connected access-control systems provide some of this information.

Visitor information

Where an organisation uses visitor features, Musterly may process visitor names, contact details, visit details, hosts, sign-in status and information provided as part of the visitor process.

Technical and support information

We receive information needed to secure and operate the service, such as IP address, browser and device details, service logs, error information and messages sent to our support team. Integration credentials are encrypted when stored.

4. Why we use personal information

When we act as a processor, your organisation chooses the lawful basis for using its workforce, visitor and workplace information. Your organisation should explain that basis to the people concerned.

5. Who receives personal information

We do not sell or rent personal information. We use trusted providers to operate Musterly:

We may also disclose information where required by law, to protect legal rights, or during a business sale or reorganisation subject to appropriate confidentiality.

6. Where information is processed

The main Musterly application database is hosted in the European Union. Vercel, Resend and Google operate internationally, so some website, email, analytics or advertising-measurement information may be processed outside the UK.

Where data protection law requires it, we use contractual and other safeguards designed to protect information transferred internationally. You can contact us for more information about these safeguards.

7. How long information is retained

• Website enquiry details are kept while we respond and, if you ask for ongoing information, until you unsubscribe or ask us to delete them.
• Application data is normally kept for the organisation's subscription and a 30-day period after cancellation so the organisation can export its data.
• Organisations can configure retention for access events and presence history, subject to a maximum of two years.
• Cookie choices are kept for 180 days. Google conversion-measurement cookies are commonly kept for up to 90 days. Analytics records follow our provider settings and applicable provider terms.
• We may keep limited records for longer where required by law or to establish, exercise or defend legal claims.

8. Cookies and optional measurement

Necessary cookies support sign-in, security and core application functions. Optional Analytics helps us understand use of the marketing website. Optional Advertising measurement tells us whether an advertisement led to a successfully created Musterly workspace.

Google Ads is used only for conversion measurement. We do not use it for remarketing or personalised advertising. Optional services remain off unless you choose them.

Use the “Cookie settings” button in the footer to change your choices. If you withdraw consent, we stop optional analytics and advertising measurement immediately. The page reloads so those services remain disabled. Your login and security cookies are not affected. Read our Cookie Notice for more detail.

9. Your rights

Depending on the circumstances, UK data protection law may give you the right to:

• ask for a copy of your personal information;
• correct inaccurate or incomplete information;
• ask us to delete or restrict use of your information;
• object to certain uses of your information;
• receive certain information in a portable format; and
• withdraw consent at any time where we rely on consent.

These rights are not absolute. If your request concerns information controlled by your employer or another Musterly customer, we may direct you to that organisation.

10. Contact and complaints

To ask a privacy question or exercise your rights, email privacy@musterly.io. We normally respond to rights requests within one month.

You can complain to the Information Commissioner's Office or another relevant data protection authority. We would appreciate the opportunity to address your concern first.

We may update this notice when our service or legal obligations change. We will highlight material changes on the website or in the application and update the date at the top of this page.