H Express Portal Privacy Notice

Effective 6 September 2026

Scope

This notice explains how the H Express Portal processes information for authorised users of its roster, leave, claims, account, administration, and audit functions.

Information processed

• Portal username, assigned role, team, and leave entitlements.

• Roster, leave application, approval, cancellation, and balance records.

• Parking-claim information and uploaded receipt images.

• Security and audit events, including login and logout time, authentication method, session fingerprint, and actions performed.

• For optional Google sign-in: the verified Google email address and Google account subject identifier.

How information is used

Information is used to authenticate authorised users, enforce role-based access, calculate and administer leave, process operational claims, display rosters, investigate errors or misuse, and maintain an accountability trail.

Google identity information is used only to link a verified Google account to an existing portal account and authenticate subsequent sign-ins. The portal does not request access to Google Account content such as Gmail, Drive files, contacts, or calendars.

Storage and disclosure

Portal records are processed using Google Apps Script, Google Sheets, Google Drive, and Google Cloud services administered for the H Express Portal. Access is limited according to the user’s portal role and to authorised system administrators. Information is not sold or used for advertising.

Information may be disclosed when required for legitimate operational, employment, security, audit, or legal purposes, or to service providers that host and operate the system.

Retention and security

Records are retained for as long as needed for operational, audit, and applicable legal requirements. Safeguards include password hashing, login-attempt throttling, short-lived server sessions, session revocation after credential or access changes, restricted administrator functions, and audit logging.

Questions and requests

For access, correction, retention, or privacy questions, contact the H Express Portal administrator at admin@kp2h.com.

This notice may be updated when portal functionality or data-handling practices change.