Privacy Notice

Data Protection and GDPR

Your Personal Data – What is It?

Personal data relates to a living individual who can be identified by the data provided to us. Identification can be by means of the information supplied or in conjunction with other information in the data controller’s possession, or likely to come into their possession. The processing is governed by the General Data Protection Regulation 2016/2017 (abbreviated to “GDPR”)

Who decides how your information is processed?

Our data controller is David Mellard, whose contact details are available on our website. This person decides how your personal data is processed within our organisation.

What data do we collect?

We receive, collect and store any information you enter on our website or provide us in any other way. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. We also collect personally identifiable information (including name, email, communications); comments, feedback, and personal profile.

How do we process the information you provide?

We comply with all obligations under GDPR by keeping your personal data safe, secure and up to date. This includes policies concerning storing, destroying, or retaining data. Bedrock HR Ltd is also responsible for preventing loss, misuse, unauthorised access or disclosure, and for ensuring that appropriate technical measures are in place to make sure your information is secure.

For what purpose will your data be processed?

Bedrock HR Ltd will use your data to enable us to supply our services to you during our normal business activity. In addition, we collect such Non-personal and Personal Information for the following purposes:

  1. To provide our clients with ongoing advice and technical support;
  2. To be able to contact enquirers with general or personalised service-related notices and promotional messages;
  3. To create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we or our business partners may use to provide and improve our respective services;
  4. To comply with any applicable laws and regulations.

What is the legal basis for processing your personal data

Bedrock HR Ltd has a lawful basis for processing data under Article 6(1)(b) of the GDPR regulation. This includes where processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.

Where you, the client, have requested a quotation for services, we need to obtain personal data to provide you with the information requested.

We may share your information with other parties in fulfilment of a contract or internal processes. This may include one or all of the following organisations: People HR (Cloud based software providers); Clear Books (Cloud based accounting software); Docusign (Electronic authorisation processing software); HubSpot (Client Relationship Management); Fairman Harris (Accountants) and other data controllers that you may request us to engage with such as accountants and payroll bureaus. Privacy notices are available on the website of each of these listed organisations.

We may also be required to share the personal data you supply us with other data controllers to comply with a common law or statutory obligation.

Informed Consent

We will not sell or share your personal data with other companies.

Your Rights under GDPR

  1. You have the right to request a copy of the personal data Bedrock HR Ltd holds about you.
  2. The right to correct any inaccurate personal information;
  3. The right to request erasure of personal information where it is no longer necessary to retain the information for statutory contractual purposes;
  4. The right to withdraw your consent for processing at any time if consent is relied upon as a processing condition;
  5. The right to request that the data controller provide the data subject with his/her personal data and, where possible, to transmit that data directly to another data controller (known as the right to data portability) [this only applies where processing is based on consent or is necessary for the performance of a contract with the data subject and in either case the data controller processes the data by automated process.]
  6. The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction be placed on further processing
  7. The right to object to the processing of personal data (only applies where processing is based on legitimate interests)
  8. The right to lodge a complaint with the Information communication Office

Online: https://ico.org.uk/global/contact-us/email/

Further processing

If you don’t want us to process your data anymore, please contact us at info@bedrockhr.co.uk or write to us at: Bedrock HR Ltd, Studio F7, Battersea Studios, 80 Silverthorne Road, London SW8 3HE.

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.