Legal

Terms of service

These terms govern your use of KoreKonnect, the attendance service operated by Kore Digital Ltd. They cover the software subscription, the KonnectReaders you buy from us, and the data processing terms that apply because we handle your staff records on your behalf. Please read them before you subscribe.

Last updated
8 August 2026
Version
1.0
Applies to
korekonnect.co.uk

The short version

KoreKonnect costs £29 or £49 a month for your whole organisation, with a 14 day free trial and no minimum term. You can cancel at any time and it takes effect at the end of the month you have paid for. Your staff data stays yours; we only process it to run the service for you. You are responsible for telling your staff that you use the system and for having a lawful reason to record their attendance. This summary is not part of the agreement.

1.This agreement

1.1

This agreement is between Kore Digital Ltd, a company registered in England and Wales under company number 17202130, whose registered office is at 82 James Carter Road, Suite A, Mildenhall, Suffolk, IP28 7DE, United Kingdom (“we”, “us”, “our”), and the organisation that subscribes to KoreKonnect (“you”, “the customer”).

1.2

By starting a trial, subscribing, or using the service, you accept these terms. If you do not accept them, do not use the service.

1.3

KoreKonnect is provided for business use. If you are subscribing on behalf of an organisation you confirm you have authority to bind it. Nothing in these terms removes rights you have as a consumer where consumer law applies to you, in particular in relation to hardware bought from our shop; see clause 10.

1.4

These terms, together with the annexes, form the entire agreement between us for the service. Our privacy policy forms part of this agreement.

2.Definitions

Defined terms
TermMeaning
ServiceThe KoreKonnect software, websites and applications we make available to you.
KonnectReaderA wall mounted NFC reader supplied by us, containing a pre-programmed NTAG 424 DNA tag.
Customer dataAll information you or your staff put into the service, including staff records, taps, shifts, leave and corrections.
Authorised userA member of your staff or an administrator you give access to the service.
Subscription periodThe month for which you have paid, starting on the day your subscription or trial converts and renewing monthly.
Data protection lawThe UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003, each as amended.

3.The service and plans

3.1

We license the service to you on a non-exclusive, non-transferable basis for the duration of your subscription, for your own internal business purposes.

3.2

We offer two plans. Both are priced per organisation, not per person, and both include unlimited staff accounts.

Plans
PlanPriceIncludes
Konnect Pro£29 per monthAttendance, shifts, lateness and grace periods, leave requests and balances, corrections with an approval trail, roles, and timesheet exports.
Konnect Premium£49 per monthEverything in Pro, plus advanced analytics, cross-site reporting, scheduled payroll exports, priority support, a guided setup call, and 2 KonnectReaders included.
3.3

KonnectReaders are sold separately on the Pro plan. The subscription does not include hardware except where a plan states otherwise.

3.4

We may improve, change or withdraw features. If we withdraw a feature you materially rely on, we will give you at least 30 days' notice by email and you may cancel under clause 9.

4.Free trial

4.1

New customers get a 14 day free trial. Nothing is charged during the trial and the total due on the day you sign up is £0.00.

4.2

A payment method is required to start the trial so that the subscription can continue without interruption. At the end of the 14 days the subscription starts automatically at the plan price and your payment method is charged, unless you cancel first.

4.3

You can cancel at any point during the trial and nothing will be charged. One trial is available per organisation.

5.Accounts and administrators

5.1

You are responsible for everything done under your account. You must keep account credentials confidential and tell us promptly at hello@korekonnect.co.uk if you believe an account has been compromised.

5.2

Your administrators create and remove staff accounts, set roles, working patterns and leave entitlements, and can set or reset staff passwords. You must make sure only trustworthy people hold administrator roles, and remove access promptly when someone leaves.

5.3

You must give accurate account and billing information and keep it up to date.

5.4

Our public demonstration environment contains fictional data, is reset every night, and must not be used for real staff records.

6.Your responsibilities as an employer

KoreKonnect records where and when your staff sign in. That is personal information about them, and you decide to collect it, so these obligations are yours and not ours.

6.1

You must tell your staff, before they start using the service, that you use it, what it records, why, and how long you keep it. You must give them your own privacy information; ours describes only what we do as your processor.

6.2

You must have a lawful basis under data protection law for recording attendance, and be able to evidence it. Where you rely on legitimate interests, you should carry out and keep a balancing assessment.

6.3

You must handle your staff's data protection requests, and respond to them within the statutory time limits. We will assist you as set out in Annex A.

6.4

You must not use the service for covert monitoring, for surveillance beyond recording attendance at the points you have told staff about, or in any way that breaks employment law.

6.5

You must not treat an automated flag, such as a late or absent marker, as the sole basis for a disciplinary decision, a pay deduction or dismissal. A person must review it.

6.6

You should tell staff to keep free text fields, such as a leave reason, brief and factual, and not to enter health or other sensitive details. If your use of the service does involve special category data, such as sickness absence, identifying a valid Article 9 condition is your responsibility.

6.7

You are responsible for keeping records for as long as the law requires of you, including working time records and payroll records. Deleting information from the service does not discharge those duties.

7.Acceptable use

You must not, and must not allow anyone else to:

  • Use the service unlawfully, fraudulently or for any harmful purpose.
  • Copy, modify, translate, reverse engineer, decompile or disassemble any part of the service, or attempt to derive source code, except to the extent that law expressly permits it.
  • Resell, sublicense, rent or provide the service to anyone outside your organisation, or operate it as a bureau service, without our written agreement.
  • Attempt to defeat the cryptographic protections on a KonnectReader, clone or emulate a tag, or record a tap for a person who did not make it.
  • Probe, scan or test the security of the service, or bypass any access control, without our prior written permission.
  • Introduce malware, or place unreasonable load on the service including through automated scraping.
  • Upload content that is unlawful, defamatory, or infringes anyone's rights.
  • Remove or obscure any notice of ownership on the service or on hardware.

We may investigate suspected breaches and may suspend access under clause 18 while we do.

8.Fees, billing and VAT

8.1

Subscription fees are charged monthly in advance, on the same day each month, starting when the free trial ends. Fees are per organisation regardless of how many staff you add.

8.2

Payments are processed by Stripe. By subscribing you authorise us, through Stripe, to charge your payment method for each renewal until you cancel. We never see or store your full card or bank details.

8.3

Prices shown include any tax that applies. We are not currently VAT registered, so no VAT is charged. If we become VAT registered we will give you at least 30 days' notice before VAT is added.

8.4

If a payment fails we may retry it and will contact you. If the subscription remains unpaid we may suspend access until it is settled, and may terminate under clause 18 if it stays unpaid for 30 days.

8.5

We may change our prices. We will give you at least 30 days' notice by email before a change takes effect, and it will apply from your next renewal. If you do not accept the new price you may cancel before it takes effect.

8.6

Promotional codes are valid only as stated when issued, cannot be exchanged for cash, and may be withdrawn at any time before use.

9.Cancellation and refunds

9.1

There is no minimum term. You may cancel at any time from your billing settings or by emailing hello@korekonnect.co.uk.

9.2

Cancellation takes effect at the end of the subscription period you have already paid for. You keep access until then. We do not refund part months, except where the law requires it or where we have materially failed to provide the service.

9.3

After your subscription ends we keep your customer data for 30 days so you can export it. After that we delete it, as described in Annex A. Export your timesheets before the 30 days expire.

10.KonnectReaders and hardware

Orders and delivery

10.1

An order is an offer to buy. A contract is formed when we confirm your order by email. If we cannot fulfil it we will tell you and refund you in full.

10.2

We deliver to addresses in the United Kingdom only. Delivery estimates are estimates and not guarantees. Risk passes to you on delivery; ownership passes when we have received payment in full.

Your rights if you are a consumer

10.3

If you buy as a consumer rather than for a business, you have a legal right under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 to cancel within 14 days of receiving the goods and get a refund. Tell us at hello@korekonnect.co.uk, return the goods within 14 days of telling us, and we will refund you within 14 days of receiving them. You pay the cost of return unless the goods are faulty. Your rights under the Consumer Rights Act 2015, that goods are of satisfactory quality, fit for purpose and as described, are not affected by anything in these terms.

Business purchases

10.4

If you buy for business use, the 14 day cancellation right above does not apply. Unused hardware in its original sealed packaging may be returned within 30 days of delivery for a refund less return carriage, at our discretion.

Warranty and use

10.5

We warrant that KonnectReaders will be free from defects in materials and workmanship for 12 months from delivery. If one fails in that period through no fault of yours we will replace it free of charge. The warranty does not cover damage from misuse, tampering, painting, immersion in water, or removal and refitting.

10.6

KonnectReaders attach with adhesive pads. You are responsible for choosing a suitable surface and for any damage to paint, plaster, wallpaper or other surfaces caused by fitting or removing them. Check with your landlord or building owner before fitting if you are not the owner. We are not liable for redecoration or making good.

10.7

Taps depend on the NFC hardware in each member of staff's own phone and on their device settings. We do not warrant that every phone model will read a KonnectReader, and compatibility is not something we control.

10.8

Each KonnectReader is pre-programmed and cryptographically tied to our service. It will not work with other systems, and we do not supply the keys. Tags registered to your organisation may be reassigned between your own sites at any time.

11.Intellectual property

11.1

We own all intellectual property in the service, our software, designs, branding and documentation. Nothing in these terms transfers any of it to you beyond the licence in clause 3.1.

11.2

You own your customer data. You grant us a licence to host, copy and process it only as far as we need to in order to provide the service, keep it secure and meet our legal obligations. We do not use it for any other purpose, do not sell it, and do not use it to train machine learning models.

11.3

If you send us feedback or suggestions, we may use them to improve the service without obligation or payment to you.

12.Availability and support

12.1

We aim to keep the service available at all times but do not guarantee uninterrupted access. There is no contractual uptime commitment on the Pro plan.

12.2

We may carry out maintenance, and will try to schedule anything disruptive outside normal UK working hours and to give notice where we reasonably can.

12.3

Support is by email to hello@korekonnect.co.uk during UK business hours. Premium customers receive priority support with a same-day response on UK working days.

12.4

Features marked as beta or preview are provided as they are, may change or be withdrawn, and are excluded from clause 12.3.

13.Confidentiality

Each of us may receive confidential information from the other. Neither will disclose it to anyone else except to staff and advisers who need it and are under equivalent obligations, or where the law requires disclosure. This does not apply to information that is already public through no fault of the receiver, or independently developed. These obligations continue for three years after this agreement ends.

14.Data protection

14.1

For customer data about your staff, you are the controller and we are the processor. Annex A sets out the terms required by Article 28 of the UK GDPR and forms part of this agreement.

14.2

For our own records about your administrators and billing contacts, we are the controller. Our privacy policy explains that processing.

14.3

Each of us will comply with data protection law in performing this agreement.

15.Warranties and disclaimers

15.1

We warrant that we will provide the service with reasonable care and skill, and that the service will materially perform as described on our website.

15.2

Apart from clause 15.1 and the hardware warranty in clause 10.5, and to the fullest extent the law allows, the service is provided as it is. We do not warrant that it will be error free, that it will meet every requirement you have, or that it will be compatible with every device.

15.3

The service produces timesheets from the taps it receives. You are responsible for checking them before using them to pay people. We are not liable for payroll errors arising from records you have not reviewed.

15.4

Nothing in these terms excludes or limits any statutory rights you have as a consumer.

16.Limitation of liability

16.1

Nothing in these terms limits or excludes our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, for breach of the terms implied by section 12 of the Sale of Goods Act 1979 or section 17 of the Consumer Rights Act 2015, or for anything else that cannot lawfully be limited.

16.2

Subject to clause 16.1, neither of us is liable to the other for loss of profit, loss of business, loss of anticipated savings, loss of goodwill, or any indirect or consequential loss, however arising.

16.3

Subject to clause 16.1, our total liability arising out of or in connection with this agreement, whether in contract, tort including negligence, or otherwise, is limited to the greater of the total fees you paid us in the 12 months before the event giving rise to the claim, or £100.

16.4

Clause 16.3 does not limit your obligation to pay fees properly due, or either party's liability under the indemnity in clause 17.

16.5

You are responsible for keeping your own copies of information you need. We recommend you export timesheets regularly.

17.Indemnity

You will indemnify us against all losses, damages, costs and reasonable legal fees we incur arising from any claim brought by your staff, a regulator or a third party that results from your use of the service in breach of clause 6 or clause 7, including a failure to inform your staff, an absent lawful basis, or unlawful monitoring. This does not apply to the extent the claim results from our own breach of this agreement.

18.Suspension and termination

18.1

We may suspend your access immediately if you breach clause 7, if your account poses a security risk, if payment is overdue, or if we are required to by law. We will tell you why and restore access once the cause is resolved.

18.2

Either of us may terminate this agreement if the other commits a material breach and does not put it right within 30 days of written notice, or becomes insolvent.

18.3

We may terminate with 60 days' notice if we withdraw the service entirely, and will refund any fees you have paid for periods after termination.

18.4

On termination your right to use the service ends, clause 9.3 applies to your data, and any fees accrued up to that date remain payable. Clauses 11, 13, 16, 17, 22 and 23 survive termination.

19.Changes

We may change these terms. If a change is material we will give you at least 30 days' notice by email to your account administrators, and it will take effect at your next renewal. Continuing to use the service after that date means you accept the change. If you do not accept it, you may cancel under clause 9. The version number and date at the top of this page identify the version in force.

20.Events outside our control

Neither of us is liable for failing to perform where the cause is outside our reasonable control, including power or internet failure, failure of a hosting or payment provider, fire, flood, epidemic, industrial action, or government action. We will tell you as soon as we reasonably can. If the event continues for more than 30 days either of us may terminate on written notice.

21.General

  • Assignment: you may not assign this agreement without our written consent. We may assign it to a group company or to a buyer of the business, on notice to you.
  • Subcontracting: we may use subcontractors and sub-processors, and remain responsible for what they do.
  • Entire agreement: this agreement supersedes any earlier discussions. Neither of us relies on any statement not set out in it, though nothing excludes liability for fraudulent misrepresentation.
  • Severability: if a provision is found unenforceable, the rest continues in force.
  • Waiver: not enforcing a right does not waive it.
  • Notices: notices to you go to your account administrator's email; notices to us go to hello@korekonnect.co.uk.
  • No partnership: nothing creates a partnership, agency or employment relationship.
  • Third parties: a person who is not a party has no right under the Contracts (Rights of Third Parties) Act 1999 to enforce any term.

22.Governing law

This agreement and any dispute arising from it, including non-contractual disputes, are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction, except that if you are a consumer resident in Scotland or Northern Ireland you may also bring proceedings in your home courts.

23.Annex A: Data processing terms

This annex applies where we process personal data on your behalf and sets out the terms required by Article 28(3) of the UK GDPR. You are the controller and we are the processor.

A1. Subject matter and detail of the processing

Details of processing
ItemDetail
Subject matterProviding the KoreKonnect attendance service to you.
DurationFor the term of your subscription, plus the 30 day export window in clause 9.3.
Nature and purposeCollection, recording, storage, organisation, retrieval, consultation, export and deletion, in order to record attendance and manage shifts, leave and corrections.
Types of personal dataNames, work email addresses, hashed passwords, staff references, roles, team and department, site assignments, tap timestamps and direction, door and site names, working patterns, shifts, leave requests, balances and reasons, correction requests and reasons, manager decisions and comments, and manager notes.
Categories of data subjectsYour employees, workers, volunteers, contractors and administrators.
Special category dataNone is requested by the service. Any that appears does so only if a user types it into a free text field.

A2. Our obligations

We will:

  • Process personal data only on your documented instructions, which include this agreement and your use of the service's features, unless the law requires otherwise, in which case we will tell you first unless the law prohibits it.
  • Make sure everyone authorised to process the data is bound by confidentiality.
  • Implement appropriate technical and organisational measures under Article 32, including those described in the security section of our privacy policy.
  • Assist you, taking into account the nature of the processing, in responding to requests from individuals exercising their rights.
  • Assist you in meeting your obligations under Articles 32 to 36, including security, breach notification and data protection impact assessments.
  • Notify you without undue delay after becoming aware of a personal data breach affecting your data, with the information you need to meet your own notification duties.
  • At your choice, delete or return your personal data at the end of the agreement, and delete existing copies unless the law requires us to keep them.
  • Make available the information you reasonably need to demonstrate our compliance with this annex, and allow and contribute to audits as set out in A5.
  • Immediately tell you if we consider an instruction infringes data protection law.

A3. Sub-processors

A3.1

You give us general authorisation to engage the sub-processors listed in Annex B.

A3.2

We will give you at least 30 days' notice by email before adding or replacing a sub-processor that handles your staff records. You may object on reasonable data protection grounds within that period. If we cannot resolve your objection you may terminate the affected part of the service and receive a pro rata refund of fees paid in advance.

A3.3

We impose data protection obligations on every sub-processor that are no less protective than those in this annex, and we remain fully liable to you for their performance.

A4. International transfers

Customer data is stored in Ireland (AWS eu-west-1), within the European Economic Area, which the UK Government has recognised as adequate. We will not transfer your personal data outside the UK and the EEA unless a valid transfer mechanism is in place, being an adequacy decision, the UK International Data Transfer Agreement, or the UK Addendum to the European Commission Standard Contractual Clauses, in each case supported by a transfer risk assessment. Annex B records where each sub-processor operates.

A5. Audit

On reasonable written notice, no more than once in any 12 months unless a breach or a regulator requires otherwise, we will provide the information you reasonably need to verify our compliance. Where information alone is not enough, we will allow an audit by you or an independent auditor bound by confidentiality, at your cost, carried out during business hours in a way that does not disrupt the service or compromise the confidentiality of our other customers.

A6. Liability

Liability under this annex is subject to clause 16, except where the law does not permit it to be limited.

24.Annex B: Sub-processors

The suppliers below process customer data on our behalf. This list is current as at 8 August 2026.

Approved sub-processors
Sub-processorPurposeData processedLocation
SupabaseDatabase hosting and authenticationAll customer data, including staff accounts and attendance recordsData stored in Ireland (EEA). Supplier headquartered in the United States.
VercelApplication and website hostingRequests to the service, including IP addresses and request metadataUnited States, with a global edge network
StripePayments, subscriptions and checkoutBilling contact details and order information. Stripe is also an independent controller for payment and fraud purposes.Ireland and the United States
ResendTransactional email deliveryContents of enquiry and order notification emailsUnited States

Questions about this list, or a request for the transfer safeguards that apply to a particular supplier, can be sent to privacy@korekonnect.co.uk.