The HR Branch Ltd ("The HR Branch", "we", "us" or "our") is committed to protecting and respecting your privacy.This Privacy Notice explains how we collect, use, store and protect personal information when you:
- Visit our website;
- Contact us with an enquiry;
- Engage our HR consultancy services;
- Subscribe to our marketing communications;
- Attend our events, webinars or training sessions; or
- Interact with us in any other way.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.
The HR Branch Ltd is the Data Controller for the personal information described in this Privacy Notice unless otherwise stated.
The HR Branch Ltd
Email:
info@thehrbranch.co.uk
Website:
www.thehrbranch.co.uk
If you have any questions regarding this Privacy Notice or your personal information, please contact us using the details above.
We may collect and process the following categories of personal information:
- Name
- Job title
- Organisation name
- Email address
- Telephone number
- Postal address
- Information relating to enquiries, consultancy projects and client relationships
- Notes from meetings and discussions
- Contractual and billing information
- IP address
- Browser type and version
- Device information
- Website usage data
- Cookie and analytics information
- Marketing preferences
- Event registrations
- Newsletter subscriptions
When providing HR consultancy services, we may process employee information on behalf of our clients, including:
- Employment details
- Performance information
- Absence records
- Disciplinary and grievance information
- Recruitment information
- Training records
- Occupational health information
- Equality and diversity data where relevant
In these circumstances, we usually act as a Data Processor on behalf of the client organisation.
As part of our HR consultancy services, we may process special category personal data where necessary, including:
- Health information
- Disability information
- Trade union membership information
- Equality, diversity and inclusion data
- Other information protected under Article 9 UK GDPR
Where special category data is processed, we will only do so where a lawful Article 9 condition applies, including:
- Employment, social security and social protection obligations;
- Establishment, exercise or defence of legal claims;
- Explicit consent where appropriate; or
- Other lawful grounds permitted by legislation.
We may use personal information to:
- Respond to enquiries;
- Deliver HR consultancy services;
- Manage client relationships;
- Provide training and workshops;
- Manage contracts and invoices;
- Improve our website and services;
- Send relevant communications and marketing;
- Comply with legal and regulatory obligations;
- Defend or pursue legal claims where necessary.
We rely on one or more of the following lawful bases:
| Purpose | Lawful Basis |
|---|
| Responding to enquiries | Legitimate Interests |
| Providing consultancy services | Contract |
| Managing client relationships | Contract and Legitimate Interests |
| Legal compliance | Legal Obligation |
| Marketing communications | Consent and/or Legitimate Interests |
| Website analytics | Consent where required |
| Employment-related consultancy services | Legitimate Interests, Contract and Legal Obligations |
Where we rely on legitimate interests, we ensure our interests do not override the rights and freedoms of individuals.
We may send information about our services, events, updates and industry insights where:
- You have consented to receive communications; or
- We have a legitimate business reason to contact you.
You may unsubscribe at any time by:
- Clicking the unsubscribe link in our emails; or
- Contacting us directly.
Our website uses cookies and similar technologies to improve functionality, analyse website usage and enhance user experience.Cookies may collect information such as:
- IP address
- Device information
- Browser type
- Pages visited
- Time spent on the website
Where required by law, we will obtain consent before placing non-essential cookies.
Further information is available in our Cookie Policy.
We may share personal information with:
- Professional advisers;
- IT and software providers;
- Cloud service providers;
- Training and event delivery partners;
- Regulatory bodies where required;
- Law enforcement agencies where legally required;
- Clients where information is processed as part of consultancy services.
We do not sell personal information.
Some of our service providers may process information outside the United Kingdom.
Where personal information is transferred internationally, we ensure appropriate safeguards are in place, including:
- UK International Data Transfer Agreements (IDTA);
- UK Addendum to Standard Contractual Clauses; or
- Other lawful transfer mechanisms approved under UK GDPR.
The HR Branch does not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
Where AI-assisted tools are used to support administrative, analytical or drafting activities, appropriate human review and oversight is always applied.
We take appropriate technical and organisational measures to protect personal information against:
- Unauthorised access;
- Loss;
- Misuse;
- Alteration; and
- Disclosure.
These measures include secure systems, restricted access controls, encryption where appropriate and confidentiality obligations for staff and suppliers.
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, regulatory and contractual obligations.
Typical retention periods include:
| Information Type | Retention Period |
|---|
| Website enquiries | Up to 24 months |
| Marketing records | Until consent withdrawn or 12 months after last engagement |
| Client contracts and consultancy records | 6 years after completion |
| Financial records | 6 years |
| Employee data processed for clients | In accordance with client instructions and legal requirements |
Retention periods may be extended where legal proceedings or regulatory investigations require this.
Under UK GDPR you have the right to:
- Access your personal information;
- Request correction of inaccurate information;
- Request erasure of information in certain circumstances;
- Restrict processing in certain circumstances;
- Object to processing based on legitimate interests;
- Withdraw consent where consent is relied upon;
- Request portability of your information where applicable;
- Not be subject to unlawful automated decision-making.
To exercise any of these rights, please contact us using the details provided in this notice.
If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the matter.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Information Commissioner's Office
Website:
www.ico.org.uk
Telephone: 0303 123 1113
Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy notices.
We may update this Privacy Notice from time to time to reflect legal, technical or operational changes.
The latest version will always be available on our website and the revision date will be shown at the top of this notice.