Privacy Policy

Last updated: October 2026

HR People First Consultancy Ltd ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and store your personal information when you visit our website or contact us through our enquiry form.

1. Who We Are

The data controller for this website is:

HR People First Consultancy Ltd
20-22 Wenlock Road
London N1 7GU
United Kingdom

For any data-related enquiries, please contact us at: [email protected]

2. What Personal Data We Collect

When you submit our contact form, we collect the following information:

Your name
Your email address
Your phone number (if provided)
The content of your message

We do not collect any special category data (e.g. health information, ethnicity) through this website.

3. How We Use Your Data

We use the information you provide solely to:

Respond to your enquiry
Provide information about our services
Follow up on any ongoing business relationship

We will not use your data for marketing purposes without your explicit consent, and we will never sell or share your personal data with third parties for their own marketing.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

Legitimate interests (Article 6(1)(f)) — to respond to your enquiry and provide the services you have requested.
Contractual necessity (Article 6(1)(b)) — where processing is necessary to enter into or fulfil a contract with you.

5. How Long We Keep Your Data

We retain your contact form submission for as long as necessary to fulfil your enquiry and any resulting business relationship, and for a period of up to 3 years thereafter, in line with standard business retention practice.

If no business relationship results from your enquiry, we will delete your data within 12 months of last contact.

6. Third-Party Services

Our website is hosted on Netlify (Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, California 94104, USA). When you submit our contact form, your data is processed by Netlify as part of their Forms service. Netlify is certified under the EU–US Data Privacy Framework and employs appropriate safeguards for international data transfers. You can read Netlify's privacy policy at netlify.com/privacy.

Our website is delivered through Cloudflare (Cloudflare, Inc., USA), which processes technical data such as your IP address to deliver the site securely. Cloudflare is certified under the EU–US Data Privacy Framework (UK Extension).

Only if you accept cookies, we use Google Ads and Google Analytics (Google Ireland Ltd / Google LLC, USA) to measure how our website and adverts perform, for example whether a visit led to a phone call click or an enquiry. Google is certified under the EU–US Data Privacy Framework (UK Extension). See Google's privacy policy.

7. Cookies

When you first visit, we ask whether you accept analytics and advertising cookies. Nothing is set and no Google script is loaded until you accept.

Your cookie choice: stored in your browser (local storage) so we don't ask again on every page. Kept for 6 months, then we ask again. This is strictly necessary and does not need consent.
Google Ads (_gcl_*) and Google Analytics (_ga, _ga_*): only with your consent. Used to measure visits and enquiries from our adverts. Google Ads cookies last up to 3 months, Google Analytics cookies up to 2 years.

Our lawful basis for analytics and advertising cookies is your consent. You can change your choice at any time: . If you withdraw consent, we remove the Google cookies from your browser.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your personal data ("right to be forgotten")
Right to restriction — to request that we restrict processing of your data
Right to object — to object to processing based on legitimate interests
Right to data portability — to receive your data in a structured, machine-readable format

To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request.

9. Complaints

If you believe we have not handled your personal data in accordance with the law, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
ico.org.uk/make-a-complaint

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.