Privacy Policy

Sandra Bracegirdle HR & Operations Consultancy
People First, Always
Last Updated: 18.08.2026

Introduction

Sandra Bracegirdle HR & Operations Consultancy is committed to protecting the privacy, confidentiality, and security of the personal and business information entrusted to us.

As an HR and Operations consultancy, we understand the importance of handling sensitive business and employee information responsibly. We are committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and best practice standards for information security and confidentiality.

This Privacy Policy explains how we collect, use, store, protect, and delete personal information when providing our services.

Who We Are

Sandra Bracegirdle HR & Operations Consultancy provides a range of services including:

```
HR Support and Advisory Services
```
```
Employment Law Compliance Support
```
```
Employee Relations Support
```
```
Manager Training and Development
```
```
HR Documentation and Policy Development
```

Operational Improvement and Process Review

Systems Implementation and Digital Transformation

Business Compliance and Governance Support

For the purposes of UK data protection legislation, Sandra Bracegirdle HR & Operations Consultancy acts as a Data Controller when processing personal information directly provided to us and may act as a Data Processor when handling information on behalf of a client.

Information We May Collect

Depending on the services provided, we may collect and process:

Business Information

```
Company name
```
```
Company address
```
```
Business contact details
```
```
Billing information
```
```
Project information
```

Personal Information

```
Names
```
```
Job titles
```
```
Work email addresses
```
```
Telephone numbers
```
```
Correspondence records
```

Information provided during consultations or enquiries

Employee Information

Where required to provide HR services, we may process limited employee data including:

```
Employment records
```
```
Absence records
```
```
Disciplinary and grievance information
```
```
Performance documentation
```
```
Training records
```
```
Investigation records
```

Redundancy and consultation documentation

Other HR-related information necessary to deliver agreed services

We will only process employee information where it is necessary to fulfil the services requested by our client.

How We Use Information

Information is processed solely for legitimate business purposes, including:

```
Responding to enquiries
```
```
Delivering consultancy services
```
```
Providing HR advice and support
```

Creating policies, handbooks and documentation

```
Delivering manager training
```

Conducting compliance reviews and audits

Supporting operational improvement projects

```
Meeting contractual obligations
```
```
Maintaining business records
```

Complying with legal and regulatory requirements

We will never use information for purposes that are unrelated to the services we have been engaged to provide.

Our Approach to Client Data

Protecting client and employee information is fundamental to how we operate.

We only request access to information that is necessary to complete the agreed work.

Wherever possible, we will work directly within a client's existing systems, platforms, databases, SharePoint environments, HR systems, document management systems, or other secure business applications.

Our preference is always to minimise the transfer, duplication, download, or storage of personal information outside of a client's environment.

By working within client-owned systems wherever practical, we help:

```
Reduce data handling risks
```
```
Protect employee confidentiality
```
```
Maintain data integrity
```
```
Minimise unnecessary data transfers
```

Ensure information remains within the client's controlled environment

Where information must be provided externally in order to complete a project, we will only process the minimum amount of information required.

Confidentiality Commitment

All client information, employee data, documents, records, and communications are treated as strictly confidential.

We understand that clients may provide access to highly sensitive information, including:

```
Employee relations cases
```
```
Disciplinary investigations
```
```
Grievances
```
```
Redundancy consultations
```
```
TUPE-related information
```
```
Sickness and absence records
```
```
Payroll and employment documentation
```
```
Operational and commercial information
```

Such information will only be used for the agreed purpose and will not be shared with any unauthorised third party.

Confidentiality obligations continue even after work has been completed.

Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

```
Performance of a contract
```
```
Legitimate business interests
```
```
Compliance with legal obligations
```
```
Consent where required
```

Where special category data is processed as part of HR consultancy services, processing will only occur where a valid legal basis exists under applicable data protection legislation.

Data Storage and Security

We take appropriate technical and organisational measures to protect information against:

```
Unauthorised access
```
```
Accidental loss
```
```
Misuse
```
```
Alteration
```
```
Disclosure
```
```
Destruction
```

Security measures may include:

```
Password-protected devices
```

Multi-factor authentication where available

```
Secure cloud storage solutions
```
```
Access controls
```
```
Secure document sharing methods
```
```
Regular software and security updates
```

Access to information is restricted to authorised persons only.

Sharing Information

We do not sell, rent, trade, or otherwise disclose personal information for marketing purposes.

Information will only be shared where:

```
The client has authorised us to do so
```

It is necessary to deliver agreed services

We are legally required to disclose information

Information must be shared with professional advisers, insurers, accountants, legal representatives, or regulatory bodies operating under appropriate confidentiality obligations

Data Retention

We retain information only for as long as necessary to:

```
Deliver the agreed services
```
```
Meet legal or regulatory obligations
```
```
Resolve disputes
```
```
Maintain essential business records
```

Where information is no longer required, it will be securely deleted, destroyed, or anonymised where appropriate.

Wherever possible, information supplied solely for the completion of a project will be deleted once the project has been concluded and any agreed retention period has expired.

Your Rights

Under UK data protection law, individuals have the right to:

```
Access their personal information
```

Request correction of inaccurate information

Request deletion of information where appropriate

```
Restrict certain processing activities
```
```
Object to certain processing activities
```
```
Request transfer of their data
```

Withdraw consent where processing relies on consent

Requests will be handled in accordance with applicable legal requirements.

Cookies and Website Information

Our website may collect limited information through cookies and analytics tools to improve the user experience and understand website performance.

This information does not generally identify individuals directly.

Where cookies are used, users will be provided with appropriate choices in accordance with applicable legislation.

Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites and encourage users to review their privacy policies separately.

Changes to This Policy

We reserve the right to amend this Privacy Policy from time to time to reflect changes in legislation, regulatory requirements, or business operations.

The latest version will always be published on our website.

Contact Us

If you have any questions about this Privacy Policy or the way in which your information is handled, please contact:

Sandra Bracegirdle HR & Operations Consultancy
Email: SBracegirdleconsult@outlook.com
Website: www.sandrabracegirdle.co.uk

Our Privacy Promise

We believe trust is earned through transparency, professionalism, and respect for confidentiality. Wherever possible, we work directly within our clients' systems to minimise data handling, only access information required to perform the agreed services, and securely dispose of data when it is no longer needed. Your business information and employee data are treated with the same care and diligence as if they were our own.