Privacy Policy

HaRper Consultancy ("we", "us", "our") is committed to protecting your privacy. This policy explains how we handle personal data in our role as an HR Consultant, acting as either a Data Controller or Data Processor, in compliance with the UK GDPR , the Data Protection Act 2018 & the Data (Use and Access) Act 2025

1. Data We Collect

We may collect and process the following personal data, depending on the services provided: 

• Identity Data: Name, date of birth, gender, marital status.

• Contact Data: Address, email, phone number.

• Employment Data: CVs, employment history, performance reviews, salary, contracts, right to work documentation.

• Sensitive Data (Special Category): Health information, ethnicity, or criminal records where necessary for employment legal obligations (e.g., in sickness management or background checks). 

2. How We Collect Data

We collect data directly from clients, employees (via our clients), and recruitment processes. Data may be collected via our website, email, or in-person meetings. 

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and legal bases: 

• Contractual Necessity: To perform HR services, payroll, and recruitment services for clients.

• Legal Obligation: To comply with UK employment laws (e.g., right to work checks).

• Legitimate Interests: To improve our services, manage our business, and provide HR updates, provided these do not override your rights. 

4. Data Sharing

We may share personal data with: 

• Service providers (e.g., payroll providers, secure cloud storage).

• Regulatory authorities (e.g., HMRC, ICO) if required by law.

• Relevant professional bodies. 

5. Data Security and Retention

• Security: We have implemented appropriate technical and organizational measures to protect personal data from unauthorized processing or loss.

• Retention: We only retain personal data for as long as necessary to fulfill the purposes outlined or as required by law. 

6. Your Rights

Under UK data protection laws, you have the following rights: 

• Access to your data.

• Correction of incorrect data.

• Erasure of your data ("right to be forgotten").

• Restriction of processing.

• Data portability.

• Object to processing, especially for marketing purposes. 

7. Transfers Outside the UK

If we transfer data outside the UK/EEA, we ensure adequate protections are in place, such as standard contractual clauses, to maintain data safety. 

8. Contact Information

If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact:

harper.hrconsultancy@gmail.com