Data stored in the EEA on Google Cloud
Stored and processed primarily in the EEA, on Google Cloud EU regions. Transfers outside the EEA are made under Standard Contractual Clauses.
Security and GDPR
Your people's data, protected
atWork handles employee accounts, orders, food preferences and, only with consent, health data. This page explains how we protect it: primary storage in the European Economic Area on Google Cloud EU regions, TLS encryption in transit, role-based access and an audit log of admin actions.
- Stored and processed primarily in the EEA, on Google Cloud EU regions
- TLS in transit
- Health data only with consent
Our principles
Six safeguards built into atWork
A meal benefit touches every employee in your company. These are the rules we follow for every account, order and preference we store.
Encryption and authentication
Data is protected with TLS in transit, and authentication safeguards protect access to every account.
Role-based access and audit log
Each admin in the HR dashboard sees and changes only what their role allows. Admin actions in the HR dashboard are recorded in an audit log, so a company can see who changed what, and when.
Monitoring, updates and backups
Safeguards that keep the platform protected and recoverable.
- Monitoring
- Logging
- Incident response
- Updates
- Backups
Health data only with consent
Dietary preferences, allergies and food restrictions are processed only with the employee's consent, which can be withdrawn at any time.
Cookie consent management
Cookies on our website are managed through a cookie banner powered by Cookiebot by Usercentrics. Necessary cookies keep the site working, and every visitor chooses whether to accept analytics, functional and marketing cookies.
Data inventory
What data we handle
Here is each kind of personal data atWork handles, why the service needs it, the legal basis for using it and how long it is kept. Health data appears only when an employee chooses to share it.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account detailsName, work email, phone, job title and company, and from your employer: employee ID, department, office location and budget allocation | To create and run your account and your meal benefit, and to deliver meals to the right office. | Contract (Article 6(1)(b)) | For as long as the account is active. |
| Orders, ratings and invoicesMeals ordered, delivery slot and office, ratings, and the company's monthly invoice | To process orders, deliver each meal, group deliveries by department, floor or office zone, and invoice the company. Payment data is handled by third-party payment providers. | Contract (Article 6(1)(b)), and legal obligation (Article 6(1)(c)) for accounting records | As required by accounting and tax laws. |
| Food preferences and allergiesDietary preferences, allergies and food restrictions | To personalise the menu and recommendations and to show allergen-friendly options. This is the health-related data atWork handles. | Consent (Article 6(1)(a)), which can be withdrawn at any time | Until consent is withdrawn or the data is no longer needed. |
| Messages and support requestsWhat you write to our team by email, phone or the website's forms | To answer you, give support and settle disputes. | Contract (Article 6(1)(b)) | For support and dispute resolution purposes. |
| Business contacts and enquiriesName, work email, company and team size from a demo, proposal or newsletter form, and the page it was sent from | To answer a request for a demo or a proposal, and to send marketing communications to people who agreed to them. | Consent (Article 6(1)(a)) for marketing communications, and legitimate interest (Article 6(1)(f)) for direct marketing to business contacts | Requests are kept while they are needed to answer you and to manage the relationship with your company, in our database, mailbox and CRM. A newsletter subscription lasts until consent is withdrawn. |
| Job applicationsName, contact details, LinkedIn address, CV and message sent through the careers form | To assess an application and answer the applicant. | Consent (Article 6(1)(a)) | A CV is deleted automatically 180 days after it is uploaded. |
| Device and usage dataIP address, device identifiers, browser and language, pages visited, and app usage events | To run, secure and improve the service, to prevent fraud and, where cookies are allowed, to measure how the website and the app are used. | Legitimate interest (Article 6(1)(f)), and consent (Article 6(1)(a)) for analytics and marketing cookies | The cookie declaration on the cookies page lists the life of each cookie. |
| Consent and preference recordsYour cookie choices, your marketing preferences and the wording you agreed to | To show that your choices were asked for and respected. | Legal obligation (Article 6(1)(c)) | Preferences and consent until withdrawn or no longer needed. Cookie consent logs are kept to demonstrate compliance where required. |
All third-party providers are bound by data processing agreements and are expected to implement appropriate GDPR safeguards. atWork does not sell personal data.
We also share data with communication providers, and with authorities when required by law. The Privacy Policy has the details of each section.
Documents
Legal and privacy documents
The documents your legal, procurement and security teams need to review atWork, in one place.
Privacy Policy
How atWork collects, uses and protects personal data for employees, clients and website visitors.
Version 1.0 · March 2026
Read the Privacy PolicyTerms and Conditions
The terms that apply to companies using atWork and to employees using the atWork app.
Updated 10 February 2026
Read the Terms and ConditionsData Processing Agreement
The agreement that sets out how atWork processes employee data on behalf of your company.
Available on request from [email protected]
Request the Data Processing AgreementSub-processors list
The third-party services that help us run atWork, such as cloud hosting on Google Cloud, and where they process data.
Available on request from [email protected]
Request the Sub-processors list
Employee rights
Employees stay in control of their data
Every employee who uses atWork can exercise these rights. Send your request to our data protection contact at [email protected].
- Access
Ask for a copy of the personal data atWork holds about you.
- Rectification
Have details that are wrong or out of date corrected, such as your office or your food preferences.
- Erasure
Ask us to erase your personal data. Order and invoice data that accounting and tax law require us to keep is retained for the required period.
- Restriction
Ask us to limit how your personal data is processed.
- Portability
Receive your personal data in a portable format.
- Objection
Object to the processing of your personal data.
- Withdraw consent
Withdraw your consent at any time where processing is based on it, for example for your dietary preferences and allergies.
- Complaint
Lodge a complaint with the competent supervisory authority.
Make a requestor write to [email protected]
FAQ
Security questions
Need something more specific?Contact our team
Data is protected with TLS in transit, role-based access, authentication safeguards, monitoring, logging, incident response, updates and backups. Dietary preferences and allergies are processed only with the employee's consent.
Security team
Questions from your security team?
Send us your questions or your security questionnaire at [email protected], or ask for our Data Processing Agreement or sub-processor list with the form. Our team will reach out to you shortly.
Request our documents
Ask for the Data Processing Agreement, the sub-processor list or both. Our data protection contact will answer.