Privacy

How we use your information

We collect the name, email address, department, supplier information and purchase details you submit so authorised staff can review and decide your purchase request.

Who can see it

Only staff whose Microsoft Entra group membership is validated can use the management area. Configured notification recipients and the Payments Manager may receive the limited request details needed for the approval process.


Retention and your rights

Requests, decisions and audit events are retained according to the organisation’s data-retention policy. Contact the organisation’s data-protection contact to ask about access, correction or other rights. Submitted requests cannot be edited through this service.


Security

The service records security and workflow events, but does not intentionally log authentication tokens, passwords, cookies or full email content.