Privacy notice
Data Controller: peopleandbusiness Ltd (People&Business)
Contact: dtaylor@peopleandbusiness.co.uk
As part of the provision of HR consultancy advice and training, People&Business collects and processes personal data relating to employers and employees and is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations under GDPR.
This notice applies to information we collect about:
People who do business with us as a client
Professional contacts and suppliers of services to us or our clients.
What personal data do we collect?
When you do business with us, become a client of ours we collect some or all of the following personal information from you:
your name, title, postal address and contact details, including email address and telephone number
any information relevant to the matter, upon which we are being asked to provide guidance, support or training as part of our agreement with you. This may sometimes include particularly sensitive personal data for example relating to health conditions, disability or protected characteristics as defined in the Equal Opportunities Act 2010.
When you do business with us as a service provider we collect some or all of the following personal information from you:
your name, title and business contact information including addresses, telephone numbers and email addresses
details relating to the performance of the contract between us, including financial information and bank details for payment.
Why do we process your personal data?
We gather information from you as our client to allow us to:
provide the services required [Performance of the contract]
improve the quality of those services [Performance of the contract]
keep you updated as to information which is relevant to the services provided [Legitimate interests]
Maintain our records for administrative purposes [Legitimate interests]
Comply with our statutory or regulatory obligations [Statutory obligations]
Who has access to your personal data?
We will not share your personal data unless:
we are required by law for example with HM Revenue and Customs and other authorities based in the UK
we have a legitimate reason to share with professional advisers for example with accountants, insurers or our IT provider in the proper performance of their contract with us.
we have your express consent, for example to take additional advice from suppliers of employment legal services or to act on your behalf in line with our agreement to deliver the services you require.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law and only process your personal data for the specified purposes and in accordance with instructions and their duty of confidentiality.
We will not transfer your data outside of the European Economic Area (EEA) unless there are specific circumstances where this is in the performance of our contract with you. In such cases if the information provided may be transferred to countries that do not have similar protections in place regarding your data and restrictions on its use as set out in this policy, we will take steps to ensure adequate protections are in place to ensure the security of your information in such circumstances. By submitting your information, you consent to these transfers for the purposes specified above.
For how long do we keep personal data?
We will keep the personal data during any ongoing agreement with you and for 7 years thereafter for the legal and legitimate reasons of retaining identity, contact, business and financial records of work undertaken by us and in case of any query or claim.
How do we protect personal data?
We take the security of your data seriously and have put in place reasonable technological and security procedures to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by People&Business in the proper performance of our duties. This includes:
Enabled firewalls and virus protection
Data encryption
Password protection systems
The anonymisation of personal data as appropriate
Our security and privacy policies are regularly reviewed.
Your rights
Under the General Data Protection Regulation (‘GDPR’) and the Data Protection Act 2018 (the ‘2018 Act’) you have a number of rights with regard to your personal data:
You have the right:
to access and obtain a copy of the information we hold on your on request for which there is no fee. We will aim to respond within one month, unless the request is particularly complex in which case it may take longer and we will keep you informed in this regard. If the request is unfounded, excessive we may refuse to comply with the request or if additional copies are required we may make a reasonable charge.
to require us to change incorrect or incomplete data; we want to ensure that your personal information is accurate and up to date. If any of the information that you have provided to us changes, for example if you change your email or postal address, please let us know the correct details as soon as possible.
to require us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; and
to object to the processing of your data where we are relying on our legitimate interests as the legal ground for processing.
If you would like to exercise any of these rights, please contact dtaylor@peopleandbusiness.co.uk.
If you believe that we have not complied with your data protection rights, you can complain to the Information Commissioner.
Your consent
By submitting your information, you consent to the use of that information as set out in this policy.
Changes to the Privacy Policy
We keep our Privacy Policy under regular review and any changes will be posted on this page so that you may be aware of the information we collect and how we use it at all times. This privacy policy was last updated in May 2018.