We may collect the following types of information depending on how you interact with our services:

Basic personal information

• Name

• Contact details

• Address

Account and transaction information

• Purchase or account history

• Payment details (including card or bank information for transfers and direct debits)

Operational information

• Records of meetings and decisions

• Information relating to compliments or complaints

• Health and safety information

Marketing information

• Marketing preferences

• Location data

• Purchase or viewing history

Recruitment information

• Contact details

• Date of birth

• National Insurance number

• Passport or photo ID copies

• Employment history and references

• Education history and qualifications

• Right to work information

• Criminal conviction checks (such as DBS)

We collect personal information in order to:

• Provide our services

• Manage customer accounts

• Process payments

• Communicate service updates

• Conduct marketing activities

• Manage recruitment processes

• Handle queries, complaints, or claims

Under UK GDPR, we must have a lawful basis for processing personal information. These include:

Consent
You have given permission for us to process your personal data.

Contract
Processing is necessary for us to fulfil a contract with you.

Legitimate Interests
We process information to support our business operations, such as offering advice to improve organisational processes, provided this does not override your rights.

Under UK GDPR, you have several rights regarding your personal information:

• Right of access – request copies of your personal data

• Right to rectification – correct inaccurate or incomplete data

• Right to erasure – request deletion of your data

• Right to restrict processing – limit how we use your data

• Right to object – object to certain uses of your data

• Right to data portability – request transfer of your data to another organisation

• Right to withdraw consent – withdraw consent at any time where consent is the legal basis

We aim to respond to all requests within one month.