Privacy policy

What we collect and why

When you contact us or request a conversation, we process the details and message you provide (such as your name, work email, organisation and enquiry) to respond and arrange next steps. Our lawful basis is our legitimate interest in answering enquiries, or taking steps at your request before entering a contract. Please do not send sensitive information in these forms.

If you subscribe to HR, Amplified. Weekly, we use your contact details to send the newsletter and related invitations on the basis of your consent. You can unsubscribe using the link in each email or contact us. We retain a minimal suppression record as needed to honour an opt-out.

For website security and operation, our hosting provider receives technical data such as IP address, browser and request details. The site stores your cookie choice locally and may store campaign parameters from the link you followed in session storage to attach them to a form you decide to submit (and, only with analytics and marketing consent, to a calendar booking). The contact form loads Google reCAPTCHA on interaction to help deter automated submissions; this involves data being sent to Google. We use legitimate interests in site security and responding to enquiries for these activities, subject to applicable storage/access rules. See our cookie policy.

Booking calendar

The Find your first move page includes a calendar for booking a 30-minute discovery call. When you reach the calendar on that page, your browser asks our booking service, which runs on Microsoft Azure, for available times. Like any web request, this check passes technical details such as your IP address and browser to the service. It carries nothing you have typed and sets no cookies.

When you choose a time and select “Book my call”, your first and last name, email address, any phone number and notes you add, and the chosen time go through our booking service to Microsoft Bookings in our Microsoft 365 environment. Microsoft Bookings creates the appointment and emails you a Microsoft Teams invitation and confirmation. If you have accepted analytics and marketing cookies, the booking also includes the campaign codes (utm_*) and any service interest from the link that brought you to the site, so we can see which campaigns lead to booked calls. After you accept, the site copies those codes from session storage into session cookies that the calendar reads, and our tag manager may set the same cookies. Without that consent, or after you withdraw it, the site removes those cookies and a booking carries no campaign codes. We use this information to hold and prepare for the call you asked for, on the basis of taking steps at your request before entering a contract, or our legitimate interest in responding to your request. Calendar bookings are kept in Microsoft 365; they do not create a record in our CRM (Salesforce). A confirmed booking is shared with analytics as an event containing the booking reference and service name, and none of your contact details, only if you have accepted analytics and marketing cookies.

Only if you choose analytics and marketing cookies do we load Google Tag Manager (including configured Google Analytics 4 and Google Ads measurement) and the LinkedIn Insight Tag to measure site use and campaigns. The lawful basis for accessing your device and the related analytics/marketing processing is your consent. You may change this through Cookie settings. Your choice does not change the basis for processing an enquiry you send us.

Recipients

Website contact, request and newsletter forms submit to Salesforce, our customer relationship system. Google processes reCAPTCHA information when you interact with the contact form and, if you consent, analytics and advertising-measurement information. LinkedIn receives Insight Tag data only if you consent. Replit hosts the website on Google Cloud infrastructure; the hosting front end may set its own operational cookie. We may share information with providers supporting email delivery and with professional advisers or authorities when necessary and lawful. Microsoft receives the details you enter in the booking calendar, through our booking service on Microsoft Azure, to create the appointment in Microsoft Bookings and send the Teams invitation; the meeting itself is subject to the arrangements for that meeting.

International processing

Some providers may process information outside the UK or EEA, including in the United States. Where a restricted transfer requires safeguards, relevant options may include an applicable adequacy decision (such as the UK Extension to the EU-US Data Privacy Framework for a provider certified for the relevant service), or appropriate contractual terms such as a UK IDTA, UK Addendum or EU Standard Contractual Clauses. We do not represent that any particular provider certification or contractual arrangement has been verified here. Contact us for details of the safeguards relevant to your data.

How long we keep data

We keep enquiry, booking and booking-request records for as long as needed to answer you, follow up appropriately and manage any resulting relationship or legal obligations. We retain newsletter details while you subscribe; after you unsubscribe, we process the removal and retain only information needed to respect your choice or meet obligations. Analytics retention depends on the relevant platform settings and purposes. We periodically review whether information is still needed and delete or anonymise it when it is not, subject to lawful record-keeping needs. Specific periods are being reviewed and are not stated here as established practice.

Your rights and complaints

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your data; object to processing based on legitimate interests; and withdraw consent at any time without affecting processing already carried out. You have rights concerning solely automated decisions with legal or similarly significant effects; we do not use the website forms to make such decisions. Contact [email protected] or write to our registered office. We may ask for reasonable proof of identity and normally respond within one month, subject to applicable extensions and exemptions.

You can complain to the Information Commissioner’s Office (ICO), telephone 0303 123 1113. If you are in the EU or EEA, you may also complain to the supervisory authority where you live or work. We welcome a chance to resolve concerns directly first.

Changes

We will update this page when practices change. Continued use of the website does not signify consent to data processing; where consent is required we will ask for it.