1. Introduction
Scott HR Consultancy Limited is committed to protecting the privacy and security of the personal data we collect about end customers , users of our services and associated suppliers.
The purpose of this privacy notice is to explain what personal data we collect about you when you visit our website. When we do this, we are the data controller. We will never sell, share or use your personal information other than as described here.
Please read this privacy notice carefully as it provides important information about how we handle your personal information and your rights. If you have any questions about any aspect of this privacy notice you can contact us using the information provided below or by emailing us at denise@scotthr.co.uk
2. What is personal data?
‘Personal data’ is any information from which you can be identified, either directly or indirectly. For example, your name or an online identifier. We do not collect any Special category data about you.
‘Special category data’ is more sensitive personal data and includes information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purposes of uniquely identifying someone, data concerning physical or mental health or data concerning someone’s sex life or sexual orientation. We do not collect any information about criminal convictions and offences.
3. Personal data we collect
We collect, use and are responsible for certain personal data about you. When we do so we are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We collect this data on the lawful basis of processing your data and applies to the information you choose to provide to us or that you allow us to collect. This includes the following information:
- full name and job title
- contact information including email address
- company information such as company name, address including post code, number of employees, website address
- other information relevant to client surveys
- purchase any of our services
- how you use our website
4. How we collect your personal data
We collect most of this personal data directly from you—when you fill in forms or otherwise interact with our site, www.scotthr.co.uk. This includes when you register to use our site, participate in discussion boards or other social media functions on our site, promotion or survey, or click on a link. We also collect your information when you correspond with us by telephone or email.
When you visit our site, some information may be stored to enhance your experience and help you navigate the site. This information will also help us to make our site more user-friendly and useful. For more details on information collected when you visit our site, please see our Cookie Policy.
5. Purposes for which we use your personal data and the lawful basis
When providing services to you, we may use your personal data for the following purposes and on the following lawful bases:
| HR Purpose/Activity | Lawful basis for processing (including basis of legitimate interest) |
| To carry out our obligations arising from any contracts. | Performance of a contract |
| To respond to sales queries, customer support or marketing queries messages. | Legitimate interests (to respond to your enquiries) |
| To notify you about changes to our service. | Necessary to comply with a legal obligation |
| To administer and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data). | Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud). Necessary to comply with a legal obligation |
| To use data analytics to improve our website, products/services, marketing, customer relationships and experiences. | Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) |
| To establish, exercise and defend our legal rights. | Necessary for compliance with a legal obligation. Necessary for our legitimate interest (for the purpose of establishing, exercising or defending our legal rights) |
| To make suggestions and recommendations to you about services that may be of interest to you. | Consent |
By submitting your personal data on this site you are affirming your explicit consent for such information to be used in accordance with this privacy policy. You will be able to withdraw that consent at any time by the methods described in this policy.
Where personal data is processed because it is necessary for the performance of a contract to which you are a party, we will be unable to provide our services without the required information.
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.
If we need to use your personal data for a purpose unrelated to the purpose for which we collected the data, we will notify you and we will explain the legal ground of processing. We may process your personal data without your knowledge or consent where this is required or permitted by law.
6.Sharing your personal data
We will not share your data with any 3rd parties, unless it is required as a legitimate interest or legal obligation, if we enter into a service contract with you.
Examples of who we may have to share your personal data with are below and for the purposes set out in the table above.
- Service providers who provide IT, HRIS and system administration services
- Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy ,and HMRC regulators and other authorities based in the United Kingdom and other relevant jurisdictions who require reporting and processing activities in certain circumstances.
We require all 3rd parties whom we transfer your data to, to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for a specified purposes in accordance with our instructions.
7. How long we keep your personal data
We will retain your personal data for as long as is necessary to provide you with our services and for a reasonable period thereafter to enable us to meet our contractual and legal obligations.
At the end of the retention period, your personal data will be securely deleted or anonymised. If you would like more detail it can be found in the company Data Retention Policy.
8. Security of your personal data
We have implemented appropriate technical and organisational measures to safeguard your personal data and protect it from accidental or unlawful destruction, loss or alteration and from unauthorised disclosure or access.
We have also put in place procedures to deal with a suspected data breach and notification process.
9. Your rights
Even though you may have given your consent for the company to process your data you can amend or withdraw your consent at any time . You can also choose to object to processing at any time. The rights you have in relation to the processing of your personal data, are to:
- Request access to your personal data
- Request rectification of the personal data that we hold about you
- Request erasure of your personal data
- Object to processing of your personal data
- Request the restriction of processing
- Request the transfer of your personal data to another party (data portability)
- Right to withdraw consent
You can see more about these rights at: A guide to individual rights | ICO
10. How to exercise your rights
You will not have to pay fee to access your personal data (or to exercise any of the other rights).
However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
We may also contact you to ask you for further information in relation to your request to enable us to give you a quicker response. We will try to respond to all legitimate requests within one month. Occasionally it may take longer than a month if your request is particularly complex or you have made a number of requests. In this case we will notify you and keep you updated.
If you wish to exercise your rights, please contact denise@scotthr.co.uk.
11. How to complain
You have the right to lodge a complaint with the independent body, if you believe we are infringing the UK data protection laws or you are concerned about the way in which we are handling your personal data.
We would be grateful if you would contact us first if you do have a complaint so we can try to resolve it for you. The independent body in the UK is the Information Commissioner’s Office who can be contacted online at:
- i. Contact us | ICO
- ii. Or by telephone on 0303 123 1113
12. How to contact ScottHR
If you wish to contact ScottHR in relation to this privacy notice, wish to change your preferences, or if you wish to exercise any of your rights outlined above, then please address your correspondence to:
- denise@scotthr.co.uk
- 07990066828
- www.scotthr.co.uk
- 5 Moordale Avenue, Waterhead, Oldham , OL4 2JP
