Privacy Policy

The type of personal information we collect

We currently collect and process the following information:

• Personal identifiers, contact details and characteristics (for example, name, job title, company name, email address and telephone number)

• Employment and professional information (for example, role, employment status, workplace issues, HR records or information provided in the course of consultancy support)

• Communication records (for example, emails, meeting notes, enquiry forms and correspondence with us)

• Technical and usage data (for example, IP address, website usage data and cookies, where applicable)

• Financial information (for example, billing address, payment records or invoice details)

• Special category data (for example, information relating to health or trade union membership, only where necessary and with appropriate safeguards)

• Marketing preferences (for example, consent to receive newsletters or updates)
  

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• To provide you with further information about our services, by providing you with an information pack or a quote for services

• To provide you with marketing services

• To keep you up-to-date if appropriate, with services or new services available

We do not share your information with any third party, nor do we sell your data.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

1. Your consent. You can remove your consent at any time. You can do this by contacting Sarah Burden (contact details above)

2. We have a contractual obligation

3. We have a legal obligation

4. We have a vital interest

5. We need it to perform a public task

6. We have a legitimate interest

How we store your personal information

Your information is securely stored in the cloud in Microsoft SharePoint. Where there are documents held, these are also stored in Microsoft, secured in the cloud.

If you receive our newsletter your name, company and email address is stored on Mailchimp.

We keep your personal data only for as long as necessary.

Your data protection rights

Under data protection law, you have rights, including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please get in touch with us at ambra@vonehr.co.uk  or via contact us on our website at www.vonehr.co.uk if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at ambra@vonehr.co.uk.  

If you wish to complain in writing, please write to us at:: 9 King Street, Westhoughton, Bolton, England, BL5 3AX.

You can also complain to the ICO if you are unhappy with how we have used your data.

https://ico.org.uk/make-a-complaint/

Helpline number: 0303 123 1113

This policy was last updated on 16th February 2026 and will be reviewed annually.