Logo Legacy NWI

Privacy policy

How we protect and use your data in our mileage management platform.

1 Introducción

At HARP AUDIT (“we”, ‘us’, “our”), operator of the mileage management platform for Legacy NWI, we are committed to protecting your privacy. This policy explains what data we collect, how we use it and your rights under data protection laws.

2 Data we collect:

Data provided directly:

  • Account information: name, email, employee ID..
  • Mileage logs: Photos of miles, dates
  • Interactions: Supervisor approval/rejection comments..

Data collected automatically:

  • Technical data: IP address, device type, browser.
  • Metadata: Timestamps, photo verification hash.

3 Use of data

Main purposes:

  • Validate and process mileage claims.
  • Generate reports for Legacy NWI.
  • Calculate additional payroll payments.

Other uses:

  • To improve the platform (anonymized usage analysis).
  • Comply with legal obligations.
  • Fraud prevention (verification of duplicate photos).

4 Legal Bases

Processing Legal basis
Mileage managment Execution of contract with Legacy NWI
Security and fraud Legitimate interest
Legal compliance Legal obligation

5 Data sharing

We do not sell or rent your data to third parties for commercial purposes.

  • With Legacy NWI: Your approved mileage records are shared for payment calculation.
  • Service providers: Web hosting (Hostinger, Cloudflare), analytics tools (Google Analytics).
  • Autoridades: Only if required by law (e.g. court order).

6 Security

Technical measures:

  • AES-256 encryption for data in transit and at rest.
  • Two-factor authentication for administrative accounts.
  • Daily backups.

7 Your Rights

You may exercise these rights by contacting Legacy NWI (your employer) or directly to us:

Access

Request a copy of your personal data.

Rectification

Correct inaccurate data.

Cancellation

Delete data when it is no longer needed.

Maximum response time: 30 working days..

8 Cookies and Similar Technologies

We use essential cookies for:

  • User authentication.
  • Security (CSRF tokens).
  • Language preferences.

We do not use third party or tracking cookies. You can manage them in your browser settings.

9 Changes to this Policy

We will notify you of important changes by:

  • Notification on the platform at login.
  • Email to affected accounts (when required by law).

10 Contact

To exercise your privacy rights or to inquire about privacy:

Data Protection Officer
Email: juan.fernandez@harpaudit.com
Phone: