Data Protection
Data Processing Roles
Last updated 23 March 2026
Understanding how personal data flows through the platform requires clarity about the roles held by each party involved. This page sets out those roles and responsibilities.
Data Controller Employees Global Ltd (trading as HeroPerks) acts as the Data Controller for personal data processed through the platform. As Controller, Employees Global Ltd determines the purpose and means of processing personal data and holds primary responsibility for compliance with UK GDPR.
Data Processor 3manfactory Ltd acts as Data Processor on behalf of Employees Global Ltd. 3manfactory processes personal data solely as required to provide hosting, maintenance, and technical operation of the platform, strictly in accordance with Employees Global Ltd’s instructions.
Sub-Processors 3manfactory engages a small number of third-party sub-processors to deliver platform services. These are listed on the Platform Sub-Processors page.
Partner Organisations Partner Organisations act as Data Controllers in their own right in respect of their employees’ data. When a Partner Organisation shares employee data with the platform to enable Member registration, they do so under their own lawful basis and in accordance with their agreement with Employees Global Ltd.
The Processing Chain

Personal data collected directly from Members, Local Suppliers, and Recommended Professionals at registration and during platform use is processed by Employees Global Ltd as Controller, with 3manfactory acting as Processor for the technical operation of the platform.
Legal responsibility for the content on this page sits with Employees Global Ltd.