Privacy Policy

Tailor-Made HR Privacy Notice

Last updated: 6 November 2025

Taylor-made HR (the “company”, “we”, “us”) is an HR consultancy based in the UK. We provide employee relations and leadership development services.

This page explains what personal data we may collect from visitors to our website (taylormadehr.co.uk), why we collect it, who we share it with, and your rights under UK data protection law (UK GDPR / Data Protection Act 2018).

We only collect the types of data we need (e.g., contact details, website analytics). If you sign up to a newsletter or contact us, we’ll ask your permission for marketing. You can withdraw consent or ask us to delete your data — contact us at zoe@taylormadehr.co.uk.

Who we are

Data controller: Taylor-made HR
Contact for data protection matters: zoe@taylormadehr.co.uk

Types of personal data we may collect

We may collect and process personal data including, where relevant:

Contact details you provide directly: name, email address, telephone number, organisation and role, message content from contact forms or enquiries.
Communication data: e-mail correspondence, meeting notes relevant to client work.
Website data: IP address, device and browser information, pages visited, duration on site, referral source and other analytics data collected by cookies or analytics tools.
Marketing preferences and consent records (if you sign up for a newsletter).
Special category data only if you provide it voluntarily in relation to HR work (for example health-related information if relevant to a particular engagement). We will treat any such data as sensitive and apply extra safeguards.

How we collect data

Directly from you (contact forms, email, phone, newsletter sign-up).

Automatically from your use of this website via cookies and analytics tools provided by our host (IONOS) and any consent-managed analytics you enable.

From third parties if you give permission or where necessary to deliver our services (for example suppliers, but we do not buy personal data for marketing).

Legal bases for processing

We will rely on the following legal bases under UK GDPR:

Contractual necessity: to perform contracts with clients or to take steps at your request before entering a contract (e.g., when delivering consultancy services).
Legal obligation: where we must retain or disclose information to comply with UK law.
Legitimate interests: for reasonable business administration and to run and improve our website, to respond to enquiries, and to maintain client relationships. (We will balance these interests against your rights and do not use this basis for marketing without consent.)
Consent: for sending marketing communications (newsletters) and for any non-essential cookies / tracking that require prior consent.

Cookies, analytics and IONOS (hosting and technical providers)

Our website is hosted by IONOS. IONOS provides hosting infrastructure and may set technically required cookies and, depending on the site package and configuration, tracking/analytics cookies (for example Snowplow in some MyWebsite products) to measure site usage and improve service. IONOS provides guidance on cookie consent and offers information about cookie categories. (IONOS)

We will display a cookie banner / consent management tool on the website (required by GDPR/ePrivacy) to ask your consent for non-essential cookies (analytics / marketing). You can accept or decline cookie categories there. (IONOS)

Examples of cookie types you may encounter:

Strictly necessary cookies — required for the website to function.
Analytics / performance cookies — used to collect anonymous usage statistics (may be Snowplow or similar depending on IONOS product settings). These will only run with consent. (IONOS)

Who we share data with

We may share your personal data with:

Service providers / processors that support our website and operations (for example IONOS as our website host and any analytics providers you consent to). IONOS acts as a processor for hosting and may process data under their privacy policy. (IONOS Group SE)
Professional advisers (e.g., accountants or legal advisers) where necessary and subject to contractual confidentiality.
Only when required by law, for example to comply with a court order or a lawful request by authorities.

We will never sell your personal data.

Data retention

We retain personal data for as long as necessary for the purpose it was collected and to satisfy legal, tax or regulatory requirements.

Typical retention periods:

Enquiry/contact form data: kept for up to 2 years unless needed for an ongoing client relationship.
Client records and contractual files: retained for the duration of the business relationship and for up to 6 years afterwards to meet statutory record-keeping and tax requirements.
Marketing lists: retained until you withdraw consent or unsubscribe.
Website analytics: aggregated/anonymous data kept as needed to operate and improve the site (individual-level logs retained for a limited period — configurable via IONOS). (IONOS)

Your rights

Under UK GDPR you have the right to:

Access your personal data (Subject Access Request).
Rectify inaccurate data.
Erase data (right to be forgotten) in certain circumstances.
Restrict or object to processing (including profiling).
Data portability (where processing is based on consent or contract and the data is processed automatically).
Withdraw consent at any time (for marketing / cookie consent).

To exercise a right, contact: zoe@tailormadehr.co.uk. We will respond within one month (or longer where permitted by law).

Security

We implement appropriate technical and organisational measures to protect personal data (secure hosting via IONOS, password protection, encryption where possible). Access to client data is limited to authorised personnel and processors who need it for legitimate business purposes.

International transfers

We operate primarily in the UK. Some service providers (including cloud or analytics providers) may process or store data outside the UK. We will only transfer data outside the UK where appropriate safeguards are in place (standard contractual clauses or processing within providers that offer adequate protections). IONOS publishes information about their processing locations and privacy practices. (IONOS Group SE)

Changes to this policy

We may update this policy from time to time. The policy’s “Last updated” date will always show the most recent version.

Contact / complaints

If you have any questions, want to exercise your rights, or wish to complain about our processing, contact zoe@taylormadehr.co.uk.

If you remain dissatisfied you can complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk.