Summary
- Your settings are stored inside monday.com, using monday.com’s app storage.
- Our server stores only your account ID, a monthly count of automation runs, the recipes you set up and, for 30 days, a log of failed runs.
- The app reads only the columns used in your recipes, on boards where you add a recipe.
- We don’t sell or share your data, show ads or use tracking cookies.
- When you uninstall, account data on our server is deleted within 24 hours.
Who we are
UK Working Days & Holidays is provided by Dylan Powell trading as ImpactLayer, a sole trader based in Bridgend, UK (“we”, “us”). We are the data controller for the information described here, except where we act as a processor for an organisation (see Our role for organisations).
Contact: support@impactlayer.co.uk
Settings kept in monday.com
Your account settings (closure days, working week and default region) are stored using monday.com’s app storage, inside monday.com. They aren’t stored on our server.
What the app reads and writes
On boards where you add a recipe, the app reads only the columns that recipe uses: dates, timelines and numbers. It writes the result back to the column you chose. It doesn’t read item names, contacts or other columns beyond what a recipe needs.
What our server stores
Our server runs on Cloudflare Workers with a Cloudflare D1 database. For each monday.com account it stores:
| Data | Why | How long |
|---|---|---|
| monday.com account ID | To know which account the data belongs to. | While installed |
| Monthly count of automation runs | To apply plan limits. | While installed |
| Recipe subscriptions: the webhook URL monday.com gives us, the board ID and column IDs you chose, and the recipe settings | So your automations can run. | While the recipe exists and the app is installed |
| Log of failed runs | To help with support. | 30 days |
| OAuth token for the board view, if one is stored, encrypted with AES-256-GCM | To show the board view. | While installed |
Automations use monday.com’s short-lived tokens for each run. Those tokens aren’t stored.
Where it’s stored
Our database is Cloudflare D1, run by Cloudflare, Inc. We ask for it to be placed in Western Europe using Cloudflare’s EU (Western Europe) location hint. A location hint is a preference, not a guarantee. Requests are processed in Cloudflare’s network, which may include data centres outside the UK.
Who we share it with
We don’t share your data with anyone else, we don’t sell it and we don’t use it for advertising. We use these sub-processors to run the app:
| Who | What for |
|---|---|
| Cloudflare, Inc. | Hosting and database. |
| monday.com | The platform the app runs on, and storage for your settings. |
To get holiday dates, the app calls GOV.UK (UK bank holidays) and Nager.Date (other countries). No personal data is sent to them.
Cookies and tracking
We don’t use advertising, analytics or tracking cookies. This website sets no cookies.
How long we keep it
- While installed: we keep the data in the table above so the app can work.
- Failed-run log: entries are deleted after 30 days.
- When you uninstall: monday.com tells the app, and we delete your account’s data on our server within 24 hours.
Dates the app has already written to your columns stay as they are after you uninstall.
Our lawful basis
We use this data to provide the app you installed (performance of a contract). We keep the failed-run log because we have a legitimate interest in fixing problems and supporting you.
Our role for organisations
Where your monday.com account holds data about other people, such as your team or clients, we act as your processor for that data where that applies, and only process it to provide the app.
Security
Any stored OAuth token is encrypted at rest with AES-256-GCM. Data travels between monday.com, Cloudflare and your browser over HTTPS.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the data we hold about you (access);
- correct it;
- delete it;
- stop using it (objection).
Email support@impactlayer.co.uk. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
If we change this policy, we’ll update this page and the date at the top.