THP
The HR People

Legal

Privacy Policy

Last updated: January 2025

1. Who we are

The HR People ("we", "us", "our") is a UK-based HR compliance platform for small and medium-sized enterprises. We are the data controller for the personal data we collect through our website and services.

2. What data we collect

We collect:

  • Account information: Email address, business name, number of employees
  • Assessment data: Your responses to our HR assessment questions
  • Training records: Module completions, quiz scores, certificate details
  • Usage data: Pages visited, features used, timestamps
  • Technical data: Browser type, IP address, device information

3. How we use your data

We use your data to:

  • Provide our HR compliance services (contract performance)
  • Generate your personalised compliance score and recommendations
  • Issue CPD certificates for completed training
  • Send you product updates and relevant HR law changes (legitimate interest)
  • Improve our services and user experience

4. Lawful basis

We process your data under the following lawful bases under UK GDPR:

  • Contract: To provide the services you have purchased
  • Legitimate interests: To improve our services and send relevant communications
  • Legal obligation: To comply with applicable laws and regulations

5. Data retention

We retain your data for as long as your account is active, plus 6 years after your last interaction to comply with UK legal requirements (limitation periods for contractual claims). CPD certificates are retained indefinitely for verification purposes unless you request deletion.

6. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data (Subject Access Request)
  • Rectify inaccurate data
  • Erase your data (with limitations for legal obligations)
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with the ICO

7. Data security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit, secure hosting, and access controls. We conduct regular security reviews and promptly address any vulnerabilities.

8. Contact us

For any data protection queries or to exercise your rights, contact us at: privacy@thehrpeople-uk.co.uk

You can also contact the Information Commissioner's Office (ICO) at ico.org.uk if you have concerns about how we handle your data.