PRIVACY NOTICE

This privacy notice is provided to inform about how and why your personal data is used so that we can be as transparent as possible, and to ensure that you are aware of your rights under data protection legislation.

 

THE COMPANY 

We are Hive HR Solutions Ltd. and we are the Data Controller. Our correspondence address is Roffey Park Institute, Forest Rd, Horsham RH12 4TB. We can be contacted on 01403 627630 or ask@hivehrsolutions.co.uk.

 

The purpose for processing your data and our basis for doing so

We process your personal data so we can engage with you to offer and provide our services to you.  We also process your personal data to maintain communication, to send information about services updates, provide free resources such as online HR Audits and market our activities. We are a business to business organisation and will usually obtain your personal data directly from you although we may be provided with your contact details by a third party, for example at networking events.

As a client or prospective client, we process your name and contact data as well as job title and details of the organisation you work for, including physical address. The lawful basis we use for this is Article 6.1.f UK GDPR (Legitimate Interest). The legitimate interest we pursue is to grow our business through expanding and retaining our client base. As with any legitimate interest processing, you have the right to object to this and you can do so by contacting us using the information provided above.

We will send you material which we believe will be of interest to you and we do this on the basis of your consent per Article 6.1.a UK GDPR.

If you fail to provide the information required, we will be unable to provide the agreed services to you.

We collect data through our website analytics some of which may identify you, such as an IP address. Our Cookie Policy details the cookies we use and you can manage your preferences through our cookie consent platform.

 

Recipients of your data

As a general principle, we will not transfer your personal data to other recipients without your permission. There are some exceptions to this:

  • It is possible, that we might be obliged to disclose personal information in response to a court order or other lawful obligation. Our lawful basis for this is Article 6.1.c -legal obligation.
  • In the unlikely circumstance you do not pay your bills, we may pass your details to a debt collection organisation. Our lawful basis for this is Article 6.1.f – legitimate interest, as we have a legitimate interest in collecting our fees.
  • We may share your data as part of a sale, transfer, or merge part of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. We would do this as under the basis of Article 6.1.f – legitimate interest as we have a legitimate interest in developing our business.

 

Data processed by third parties on our behalf

We use the services of other organisations in the processing your data. We use cloud-based email and document storage, customer relationship management and video conference platforms. Our website processes limited personal data such as through our contact form. We also provide limited personal data to organisations that perform maintenance and service work on our behalf. We also utilise the services of an external accounting company for our finance purposes.

Those organisations that process personal data on our behalf are subject to a data processing contract as required by Article 28 of the UK GPDR. This ensures that your data is handled in accordance with the UK GPDR.

 

Transferring your data outside of the UK

We transfer personal data outside of the UK by virtue of our cloud hosted CRM which holds data in the USA. This transfer of data is facilitated through the UK extension to the EU – US Data Privacy Framework. We also transfer personal data to the EU which is facilitated by the EU / UK adequacy decision.

 

Retention periods 

We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. We will retain the personal data of our clients for 7 years.

 

Your rights 

The UK GDPR provides you with several rights in relation to the data of your we process. The rights relevant to our activities are:

  • You have the right to get access to and copies of your personal data.
  • You can ask us to rectify any inaccurate information we may be holding.
  • You can request we restrict our processing of your data.
  • You can ask us to erase your personal data if it is no longer required for the purpose we collected it or have no legal obligation to retain it.
  • You have the right to object to processing we undertake under a legitimate interest basis.

If you want to exercise any of these rights, please contact us using the above contact details.

You also have the right to lodge a complaint about our processing with a supervisory authority — the UK’s Information Commissioner’s Office.

The Information Commissioner’s Office
Wycliffe House, Water Lane,Wilmslow,Cheshire SK9 5AF.

Helpline number: 0303 123 1113