HR Biscuit Ltd Privacy Policy  

So that we can provide a service to you need to process some of your personal data. We make sure that we only collect what we need and have outlined below the various ways in which we process your personal data:

When you visit our website: We use cookies on our website which collect various types of personal data. This will include details about your visits to our website; page views, downloads, navigation, and exit; IP address; geographical location; browser type and version; operating system; referral source; length of your visit.

Some of these cookies are necessary to ensure that the website works correctly, and other cookies require your consent. You can find out more about our cookies and how you can manage your consent in our cookie policy here.

Our website may contain links to other external websites. We aren’t responsible for the practices, policies or content of such websites and suggest that you check their privacy policies to ensure that you are happy to continue browsing.

When you become one of our business customers: We may have collected your data in several ways, such as at an event, or via a Teams meeting or webinar. If your organisation is one of our clients, they may have passed your information onto us, or we may have found you on publicly available sites such as Companies House or LinkedIn.

We will process your name and contact details, as we have a legitimate interest to do so. This is so that we can fulfil our contract with your organisation and answer any enquiries you may have.

When you are on our marketing list: We will collect your name and contact details so that we can send you appropriate marketing communications. As business customers, we are permitted to use our legitimate interest to send you solicited and unsolicited marketing messages unless you have opted out. You are welcome to unsubscribe at any time. We are careful when we send unsolicited marketing messages to potential business customers and always ensure that these are proportionate and include a copy of this privacy notice. We also have a legitimate interest assessment on file to ensure that your rights as individuals are not infringed.

If you are a sole trader we will seek your consent to be added to our marketing list.

When you send us an enquiry: You may have sent us an enquiry via the contact page on our website. We will collect your name and contact details as it’s in our legitimate interest to do so that we can enter into correspondence with you and answer your enquiry.

If you are on our marketing list: If you remain part of our active marketing list, we will keep your personal data until you opt-out. At that point, we will use a suppression list to ensure that we don’t contact you in error.

If you are a client of ours: we will keep your personal data for as long as we have a contract with you and then for a further 7 years in accordance with HMRC guidelines.

We share your personal data with various organisations so we can fulfil our contract with you to help us run our business and to fulfil our legal obligations.

These include: Marketing & Branding Agencies, Accountants, Webhosts, Software Developers We also use Microsoft, and a CRM to ensure that we run our business efficiently.

We ensure that our systems are robust, and only share your personal data with organisations that have appropriate safeguarding mechanisms in place. Where required, we have done a transfer risk assessment to ensure that international transfers of personal data are lawful. We use Standard Contractual Clauses along with the UK Addendum or IDTA where required. We have Data Processing Agreements with our Data Processors and never sell personal data to third parties.

In the event that HR Biscuit Ltd is sold or transfers its assets to another party, your personal data could be one of the transferred assets. If your personal data is transferred it will remain subject to this Privacy Notice. Your personal data will be passed onto a successor in the even

You have several rights which you can access free of charge. In certain circumstances we reserve the right to charge a reasonable fee if your requests are unfounded or excessive.

You have the right:

• Right of access: You can request access to a copy of the personal data which we hold about you as well as details about why and how we use your data.
• Right to rectification: You can ask us to change or complete any personal data we hold about you which is inaccurate or incomplete.
• Right to be forgotten/erasure: You have a right, under certain circumstances to ask us to delete any personal data we hold out you. Please note that there may be situations where we must retain your personal data after a request for erasure where we have a lawful basis for doing so.
• Right of restriction: You can ask us to restrict (i.e.: prevent) the processing of your personal data where you have objected to our use of it, and we have no lawful basis to continue processing your personal data.
• Right to data portability: In certain circumstances, you can ask us to transfer the data we hold about you to another. This would be sent in a structured, commonly used, electronic form.
• Right to object: You can object to us using your personal data for purposes; and
• Automated decision-making: You have a right not to be subjected to automated decision-making and profiling in certain circumstances.

For more information about these rights and when you can request them, please visit the Information Commissioners Guide to Data Subject Rights

If you wish to exercise any of these rights, please contact us at contactus@hrbiscuit.co.uk. We will respond to you within one month. If your request is complex and we require more time, we will contact you and let you know within the first month.

We are always happy to answer your queries regarding privacy. Please contact our DPM on contactus@hrbiscuit.co.uk.

If you have a complaint, please get in touch with us so that we can resolve any concerns. You also have a right to lodge a complaint with the Information Commissioners Office if you believe your personal data has been processed in a way which does not comply with Data Protection Legislation. You can call the ICO helpline on 0303 123 1113 or visit their website here.

We keep this Privacy Notice under regular review. The most recent update is July 2022

If you have any general questions about the Site or the information we collect about you and how we use it, you can contact us at Email: contactus@hrbiscuit.co.uk

HR Biscuit Ltd



Last Modified 14/07/2023