Last updated March 2026; effective from March 2026
We are Spill App Ltd and are located at 9th Floor 107 Cheapside, London, United Kingdom, EC2V 6DN. We are registered on Companies House under number 10602161 with the ICO number ZA459842 — you can look us up in the ICO register here.
In the US, we are Spill Inc and are located at Corporation Trust Center, 1209 Orange Street, City of Wilmington, County of New Castle, Zip Code 19801.
If you have any questions about how we process your personal data then you can contact our DPO on [email protected].
Spill App Ltd provides all-in-one mental health support for employees. This includes one-to-one sessions, manager mental health training, and regular feelings check-ins — embedded into the company's communication channels.
As a company dealing with sensitive issues to do with people’s mental health, we take privacy and confidentiality extremely seriously.
Spill processes your data for the purpose of offering our service, meaning remote sessions, wellbeing tools, and mental health content.
Principally, we’re a data controller with regards to the user data we collect for the purposes of providing the Spill services. If you’re based in the US, Spill Inc and Spill App Ltd are joint controllers for this data.
Being a controller means that we are trusted to look after and deal with your personal information in accordance with data protection law. We determine the ways and means of processing your data and must therefore be accountable for it.
However, in some cases we may also act as a data processor where your employer is the controller. When we first start to work with a company, if the employer provides Spill with all employees’ email addresses or communication app user IDs, Spill can contact the employee (you!) to offer our Spill services. We are using your credentials to send the invitation on the instruction of your employer, and are therefore a processor.
If we have enabled email domain access or a sign-up link for your company instead, employees can proactively create a Spill account. That means there’s no instruction to send invitations to you, so we’re not a data processor for that step.
If you have questions about the invitation process, please contact your employer.
Note: If you are the organiser of a Team Check-in, then we are a processor for the data used to set up the invite by you. If you select a meeting, Spill will use the video link URL for that event in order to generate a Team Check-in URL. When setting up the meeting, Spill will only process the data you ask us to process and do this as a processor on behalf of your employer. For details about the information collected during Team Check-in, please see below.
‍
If you have any questions about how we handle your personal data, please email us at [email protected].
As a data subject you have rights in respect of our processing of your personal data when we are the controller of your data: