Privacy Policy

The information collected allows the creation of a profile on Daysium to record and evidence travel for tax residence and visa compliance.

• Contact information — name, email, phone (account registration, mailing list, forms, sales/support contact).
• Device and location data — IP address, OS, browser, time of visit; GPS data from your phone and geo-tags on photographs taken or uploaded to Daysium Mobile.
• Tax and social security numbers — optional, added by you in Daysium Mobile.
• Usage information — pages visited, clicks, timing (cookie-managed).
• Cookies and page tags — third-party tracking for aggregated/anonymous visitor data.
• Billing details — via the credit card processor (cardholder name, billing address, email, card number, expiry, security code).
• Account settings — name, email, default language, time zone.
• Other data you submit — including personal data in notes or free-text fields. "We recommend that you do not include personal data in any notes or free text fields in Daysium Mobile."

Data you provide on the Platform — at registration of interest, registering to use the Platform, completing your profile, or subscribing. Correspondence via email/telephone/in-app support is recorded.

• Creating a profile — name and contact details.
• Identity verification — to confirm identity at login, matched against existing records.
• Evidencing your location — Daysium Mobile asks permission to record location data to evidence travel for tax residence and visa compliance; option to upload/take photographs as evidence.
• Generating reports — optional tax/social-security numbers enable reports to share with accountancy or tax specialists.
• Communication with Daysium — responding to and recording correspondence.
• Marketing — mailing-list email use.

Where you are given access to a Daysium account by someone else — for example a family member, adviser or assistant — see Section 5 for how information is shared between Users of the same account.

We will not sell or rent your information to third parties. We will not share your information with third parties for marketing purposes.

Your information is accessible to Daysium administrators, and to other Users of the same account where the account holder — or Daysium at the account holder's explicit written request — has granted them access. The Platform is used by more than one person: depending on the access and consents given by the account holder and by each individual, other Users (such as family members, advisers, assistants or administrators) may be able to see day counts and status and, where consent has been given, locations and evidence. This is set out in our Terms of Use, which every User accepts when they use the Platform.

If you use the Platform in connection with a professional adviser, family office or trust firm, that firm is separately responsible, as its own data controller, for its own records about you (such as its advice or administration files). Daysium does not share your Platform data with that firm except where you or the account holder has specifically granted the firm access as a User.

In addition, information may be passed to third-party service providers (sub-processors) for the purposes of completing tasks and providing services on Daysium's behalf. These providers are contractually obligated to use personal data only for specified purposes and to protect its confidentiality and security. A list of the sub-processors we use — what each does, where data is held, and the safeguards that apply — is available on request by emailing legal@daysium.com. We review this list whenever a sub-processor is added, removed or changed.

Daysium may disclose information under a legal duty, or to enforce/apply the Terms of Business and other agreements, or to protect the rights/property/safety of Days Limited, its users, or others (including exchanging information for fraud protection and credit-risk reduction).

Sharing data with partners. When you use the platform to contact a trusted partner, Daysium may share limited personal data — specifically your name and the partner contacted — to facilitate the introduction and track introducer fees/commissions.

• What we share: your name and email address.
• Why: to enable the partner to identify and respond to your enquiry and to track introducer fees/commissions.
• What we don't share: message content remains confidential, sent directly to the partner; Daysium does not access or store the message content.

The records at the heart of the service — your day-count history and the evidence you upload — are stored in the United Kingdom and encrypted at rest. Some supporting functions, including sign-in, notifications, email and customer support, are provided by established international providers that process certain data (such as account details and technical identifiers) in the United States, under Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. System logging is provided from within the European Union. Full detail of where each sub-processor holds data is in the sub-processor list referred to in Section 5.

Change your marketing preferences at any time (unsubscribe link, the website option, or email legal@daysium.com).

To cancel your subscription, contact our Customer Success team at support@daysium.com. When your subscription ends, your access to the Platform ends. Your records are not deleted — see Section 13.

To request erasure of your personal data, email legal@daysium.com (see Sections 10 and 11).

Update details by logging into the Platform and amending your profile. Alternatively, email legal@daysium.com or write to the registered office if information is inaccurate or out of date.

Data given via the Platform is treated securely. The Platform is encrypted and authenticated using TLS 1.2 (TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256 cipher suites) on SSL. Non-sensitive personal data (e.g. email) is transmitted normally over the internet and cannot be guaranteed 100% secure. Where a password grants access, you are responsible for keeping it confidential — "We ask you not to share your password with anyone."

You are responsible for ensuring the information you provide is accurate, complete and up to date. Rights include:

• find out how we process your data;
• request correction of incorrect/inaccurate data (or correct it yourself via your profile);
• request deletion (within 30 days);
• obtain restriction on, or object to, processing;
• withdraw consent where we rely on consent (including direct marketing);
• object to legitimate-interests direct marketing;
• request a copy of the personal data we hold about you — we will provide this in a structured, commonly-used format within one month of your request (extended to three months for complex or numerous requests), including any evidence files you have uploaded;
• request access to data shared with partners, including the partner contacted;
• withdraw consent for sharing data with partners, where applicable;
• object to processing for introducer-fee tracking based on legitimate interests;
• raise a data protection complaint directly with us — see Section 11 — or lodge a complaint with the Jersey Office of the Information Commissioner (the JOIC) at jerseyoic.org, or, if you are based in the UK, the Information Commissioner's Office (ICO) at ico.org.uk.

Exercise rights via legal@daysium.com.

You have the right to raise a data protection complaint directly with us. Email legal@daysium.com with the details of your concern, or write to us at Daysium, 1-3 La Colomberie, St. Helier, Jersey, JE2 4QB.

We will acknowledge your complaint within 30 days of receipt, investigate without undue delay, and keep you updated on progress.

If you're not satisfied with our response, you can escalate to the Jersey Office of the Information Commissioner (JOIC) at jerseyoic.org, or, if you're based in the UK, the Information Commissioner's Office (ICO) at ico.org.uk.

• processing necessary for performance of the contract to provide services; or
• legitimate business interests; or
• consent, where relied on (you will be made aware).

For sharing data with partners to facilitate introductions and track introducer fees: consent (by submitting the contact form) and, where consent is not applicable, legitimate interests in enabling partner introductions and managing commissions transparently.

While your membership is active, your records are retained and fully accessible.

When your membership ends we do not delete your records automatically. We keep them for no longer than is necessary, having regard to the periods during which a tax authority may open an enquiry into the years those records cover. We will delete them if you ask us to.

If you subscribe to Daysium Vault, a paid archival service, your records remain preserved and retrievable through the Daysium Portal for as long as your Vault subscription is maintained.

If someone contacts us with the legal authority to act for a deceased client's estate — an executor, administrator, or their solicitor — we will verify that authority before releasing anything. This is a service we choose to offer to support estates rather than an automatic right, and we may ask for supporting documents and charge a reasonable administration fee to cover the work involved. Where the records include personal data relating to other living individuals, such as other members of a family or family office account, we will remove that information before releasing anything, to protect the privacy of those individuals.

You can ask for a copy of your own personal data at any time. See Section 10.

Device information (computer/mobile/tablet), including IP address, OS type and browser, collected for system administration. Statistical, does not identify an individual.

Cookies distinguish users and improve the site; they collect statistical browsing data and do not identify individuals (e.g. storing country preference). Cookies can be turned off via browser preferences (may reduce functionality). See our Cookie Policy for detail on the cookies we use.

This notice is kept under regular review.

Questions or requests about this notice, or about your personal data, can be sent to legal@daysium.com, or by post to our registered office: Days Limited, 1-3 La Colomberie, St. Helier, Jersey, JE2 4QB.