This Privacy Policy describes how Davyn Ltd (“Davyn”, “we”, “us”, or “our”) handles data in connection with Davyn Payroll for Business Central (the “App”) — a software extension for Microsoft Dynamics 365 Business Central distributed through Microsoft AppSource.

This policy is specific to the Davyn Payroll for Business Central application. It supplements our general website privacy policy and governs the collection, processing, storage, and handling of data within the App.

Davyn Payroll for Business Central is a native Business Central extension installed directly within your organisation’s Microsoft Dynamics 365 Business Central environment.

This means:

• Data Residency follows your Business Central tenant’s region, as configured by your organisation with Microsoft.
• Data Ownership remains entirely with the Customer (your organisation).
• Tenant Isolation is maintained – the App cannot access data from any other Business Central tenant.
• Zero Davyn Access. Davyn does not have access to your payroll data, employee records, or financial data.

The App processes the following categories of personal and business data, all of which reside within your Business Central tenant:

3.1 Employee Personal Data

• Employee name and number
• Department/position
• Bank account details
• Email address
• Employment status
• Position history

3.2 Payroll & Financial Data

• Salary and Pay Rates
• Time & Attendance records
• Gross Pay & Deductions
• Net pay calculations
• Tax Worksheets & YTD
• Statutory deductions
• Bank deposit instructions

3.3 Audit & Log Data

• Payroll calculation logs
• User action logs
• Approval request records

3.4 Sensitive Data

• Tax identification numbers
• Statutory registration numbers
• Bank account numbers

The App interacts with the following Microsoft services as part of Business Central’s standard operation, governed by Microsoft’s own privacy commitments:

• Microsoft Dynamics 365 Business Central (host platform)
• Microsoft Exchange / Microsoft 365 (if email payslip delivery is enabled, using your organisation’s email server configuration)

Davyn does not use third-party analytics, tracking, or telemetry tools within the App.

Data created by the App — payroll batches, calculations, logs, and payslips — is retained within your Business Central tenant for as long as your organisation requires, subject to your own data retention policies.

To delete specific payroll records, your Business Central administrator can use the standard Business Central data management tools. Contact Davyn support for assistance with bulk data deletion if required.

Because Davyn does not hold or control your payroll data, requests from employees (data subjects) to access, correct, export, or delete their personal data must be directed to your organisation as the data controller.

Davyn Payroll for Business Central relies on the security infrastructure of Microsoft Dynamics 365 Business Central, which includes:

• Encryption in Transit:
  TLS encryption for all data transmitted within the Business Central platform.
• Encryption at Rest:
  Managed by Microsoft at the infrastructure level.
• Role-Based Access Control:
  Only users with appropriate permissions can access payroll data.
• Multi-Factor Authentication:
  Configured via your Microsoft 365 / Entra ID tenant.

The App is designed for use by organisations processing adult employee payroll data. It is not intended for use with personal data of individuals under the age of 16, and we do not knowingly process such data through the App.

The App does not transfer data to Davyn or any third party. Data residency is determined by your Microsoft Business Central tenant configuration.

If your organisation operates across multiple jurisdictions, your data residency obligations are governed by your agreement with Microsoft.

We may update this Privacy Policy from time to time to reflect changes in the App or applicable law. We will notify customers of material changes by updating the “Last Updated” date at the top of this page and, where appropriate, by direct communication to registered customers.

We may update this Privacy Policy from time to time to reflect changes in the App or applicable law. We will notify customers of material changes by updating the “Last Updated” date at the top of this page and, where appropriate, by direct communication to registered customers.