Privacy Policy
Last updated: November 2025.
Enhanced HR Consulting Ltd (“we”, “our”, “us”) is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or contact us directly.
Enhanced HR Consulting Ltd is the controller and responsible for this website and the personal data collected through it.
1. Who we are.
• Enhanced HR Consulting Ltd.
• Company Number: 16487458.
• Registered Address: Unit 82a James Carter Road, Mildenhall, Bury St Edmunds, England, IP28 7DE.
• Email: enhanced_HR@outlook.com.
Enhanced HR Consulting Ltd is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information we collect.
We may collect and process the following categories of personal data when you interact with us or use our website
• Name, address, telephone number(s) and email address.
• Any information you provide in contact or enquiry forms.
• IP address, browser type and device information.
• Information about how you use our website through cookies and analytics.
We do not knowingly collect special category data (such as health information) through our website. Our website is not intended for children and we do not knowingly collect data relating to children.
2.1 Failure to provide personal data.
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may be unable to perform the contract or deliver the requested service. In such cases we will notify you at the time if this affects your enquiry or agreement.
3. How we use your information and our lawful bases.
We may also receive limited personal data about you from publicly available sources such as Companies House or from third-party providers that support our business operations. This information is used only for verification, compliance or legitimate business purposes and is processed in line with this Privacy Policy.
We process your personal data only when we have a lawful basis for doing so under the UK GDPR. The table below sets out how we use your data and the corresponding lawful basis:
3.1 Processing activity: Enquiry form submission.
• Categories of personal data: Name, email, phone number, message content.
• Lawful basis: Consent (Article 6 (1)(a)).
3.2 Processing activity: Client relationship management and correspondence.
• Categories of personal data: Name, contact details, business information.
• Lawful basis: Legitimate interests (Article 6 (1)(f)) – to maintain client relationships and respond to communications.
3.3 Processing activity: Website analytics and cookies.
• Categories of personal data: IP address, device details, browsing behaviour.
• Lawful basis: Legitimate interests (Article 6 (1)(f)) – to improve site functionality and user experience.
3.4 Processing activity: Legal and regulatory obligations (e.g. record keeping).
• Categories of personal data: Any of the above as required by law.
• Lawful basis: Legal obligation (Article 6 (1)(c)).
3.5 Change of purpose.
We will only use your personal data for the purpose it was collected unless we reasonably consider that another purpose is compatible with the original one. If we need to use your data for a new purpose, we will inform you beforehand and explain the legal basis that allows this.
4. Cookies and website analytics.
Our website uses cookies to improve your browsing experience, analyse site traffic and understand user interaction. Cookies may include essential, performance and analytics cookies. By continuing to use our site, you consent to our use of cookies as outlined in this policy.
You can refuse or delete cookies through your browser settings. Please note that disabling cookies may affect the functionality or performance of certain parts of the website.
Our site may contain links to websites operated by third parties. We are not responsible for their privacy practices. We encourage you to read their privacy policies.
Non-essential cookies, such as analytics cookies, will only be placed on your device if you provide consent through our cookie banner.
5. Marketing communications.
We may contact you with information about our services that we believe may interest you based on your previous engagement with us. You can opt out of receiving marketing communications at any time by emailing enhanced_HR@outlook.com. We do not share your details with third parties for their own marketing purposes.
We send direct marketing on the basis of our legitimate interests where lawful, or with your consent where required by the Privacy and Electronic Communications Regulations. If we obtained your details during a sales enquiry or service purchase, we may rely on the ‘soft opt-in’. You can opt out at any time by emailing enhanced_HR@outlook.com.
6. Sharing your data.
We do not sell, rent or trade personal data. We may share limited information with trusted third parties where necessary to operate our website or comply with legal obligations. These include
• Namecheap Inc. (website hosting and server management – United States).
• Email and IT service providers used for business communications and data storage.
• Professional suppliers and service partners (independent controllers or processors, as applicable) where necessary to refer your enquiry or deliver a contracted service. We only share the minimum data required.
All third parties are required to maintain appropriate security to protect your data and process it only in accordance with our instructions.
7. International transfers.
Our website is hosted by Namecheap Inc., which stores data on servers located in the United States. Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the Information Commissioner’s Office (ICO) to ensure your data remains protected to UK GDPR standards.
For transfers to the United States we use the UK Addendum to the EU Standard Contractual Clauses or the UK International Data Transfer Agreement, as applicable.
8. Data retention.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Typically, enquiry and correspondence data are retained for up to 24 months from the last contact, unless you request earlier deletion. Records required for legal, tax or regulatory compliance may be kept for up to six years. Once data is no longer required, it is securely deleted or anonymised.
When deciding how long to retain personal data, we consider the amount and sensitivity of the data, the risk of harm from unauthorised use or disclosure, the purposes for which we process it, and any legal, tax, or regulatory requirements.
9. Data security.
We take appropriate technical and organisational measures to safeguard personal data against unauthorised access, alteration, disclosure or destruction. These measures include encrypted storage, secure access controls and restricted internal access. However, no internet transmission is entirely secure and we cannot guarantee absolute security.
In the unlikely event of a personal data breach, we will notify the Information Commissioner’s Office and where legally required, any individuals affected.
10. Your data protection rights.
Under the UK GDPR, you have the following rights in relation to your personal data
• The right to access the data we hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure (“right to be forgotten”).
• The right to restrict processing.
• The right to object to processing based on legitimate interests.
• The right to data portability.
• The right to withdraw consent at any time where processing relies on consent.
To withdraw consent please email enhanced_HR@outlook.com.
You can exercise any of these rights by contacting enhanced_HR@outlook.com. We may ask you to provide proof of identity before processing your request to ensure that personal data is not disclosed to anyone who does not have the right to receive it. You will not be charged a fee for exercising your rights.
We would appreciate the opportunity to address your concerns before you approach the Information Commissioner’s Office, so please contact us first. If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) via www.ico.org.uk or by telephone on 0303 123 1113.
We aim to respond to all legitimate requests within one month.
If your request is complex or numerous, we may take longer and will keep you informed of progress.
11. Automated decision-making and profiling.
We do not use your personal data for automated decision-making or profiling that produces legal or significant effects on you.
12. Whether data provision is required.
The provision of your personal data is not a statutory or contractual requirement when using our website. However, if you choose not to provide contact details when submitting an enquiry, we may be unable to respond.
13. Data protection officer and contact.
We have not appointed a Data Protection Officer. For all data protection queries contact enhanced_HR@outlook.com.
14. Updates to this policy.
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The latest version will always be published on this page, with the date of the most recent update displayed at the top.
