Privacy Policy

Privacy Notice

Human (Yorkshire) Ltd and Human People & Culture UK Ltd

This Privacy Notice explains how personal data is collected, used and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This notice applies to:

• Website visitors

• Client organisations

• Employees and workers of client organisations

• Programme participants (including Career Ascent)

• Coaching clients

• Marketing contacts

• Individuals who contact us

1. Who We Are

This Privacy Notice applies to:

• Human (Yorkshire) Ltd

• Human People & Culture UK Ltd

(together referred to as “Human”, “we”, “us”, “our”).

Both organisations are UK-registered companies providing people, culture and leadership consultancy, coaching and development services.

Depending on the nature of the engagement:

• Either company may act as an independent Data Controller; or

• The companies may act as Joint Data Controllers where services are delivered collaboratively.

Where we act as Joint Data Controllers, we determine jointly the purposes and means of processing personal data. The relevant contracting entity will be identified in your client agreement or engagement documentation.

For all data protection enquiries, please contact:

Email: [Insert privacy contact email]
Registered Address(es): [Insert registered addresses]

2. Our Role Under Data Protection Law

We may act as:

• Data Controller – where we determine how and why personal data is processed.

• Joint Data Controller – where both companies jointly determine processing purposes and means.

• Data Processor – where we process personal data on behalf of a client organisation under contract.

Where we act as Joint Controllers, individuals may exercise their rights against either entity.

3. The Personal Data We Collect

Depending on how you engage with us, we may collect:

Website & Enquiries

• Name

• Email address

• Telephone number

• Organisation name

• Information submitted via forms

Consultancy & Programme Delivery

• Name

• Work email address

• Job title

• Department

• Employment-related development information

• Self-assessments and reflections

• Development goals and action plans

• Workshop participation feedback

• Coaching notes (where applicable)

Marketing

• Name

• Email address

• Organisation

• Communication preferences

We do not routinely collect special category data. If such data is voluntarily disclosed (for example during coaching), it will be handled confidentially and in accordance with UK GDPR.

4. How We Use Personal Data

We use personal data to:

• Deliver consultancy and advisory services

• Deliver coaching and development programmes

• Provide anonymised thematic insights to client organisations

• Manage client relationships

• Respond to enquiries

• Send relevant business communications (where lawful)

• Improve our services

We do not sell personal data.

5. Lawful Bases for Processing

We rely on:

• Contractual necessity – to deliver services agreed with clients.

• Legitimate interests – to operate and improve our services.

• Consent – where required (for certain communications).

• Legal obligation – where processing is required by law.

6. Programme Participants (Including Career Ascent & Transition Coaching)

Our Role

For programme participants, we may act as:

• Data Processor (processing on behalf of the employer); and/or

• Data Controller or Joint Data Controller (particularly in relation to coaching data).

The specific role depends on the contractual structure of the engagement.

Programme Confidentiality & Reporting Boundaries

Coaching Confidentiality

All individual coaching conversations are confidential.

Coaching notes are stored separately and securely. They are not shared with the participant’s employer and are accessible only to the assigned coach and Human where operationally necessary.

We do not provide individual-level feedback, personal disclosures, development reflections or coaching summaries to employers.

Reporting to Employers

Our programmes, including Career Ascent, are delivered as development and empowerment initiatives.

We do not report individual attendance or participation levels.

Where insights are shared with employers, this is:

• Thematic

• Aggregated

• Fully anonymised

No individual participant is identifiable in any reporting provided.

When Confidentiality May Be Overridden

Confidentiality will only be overridden in the following circumstances:

• Risk of serious harm to the participant

• Risk of serious harm to others

• Disclosure of serious misconduct

• Whistleblowing-type disclosures involving unlawful or unethical activity

Where appropriate, we will seek to discuss next steps with the participant before taking action.

7. Data Sharing

We may share personal data with:

• Client organisations (where contractually required)

• Approved associate coaches or facilitators

• Professional advisers (legal, financial)

• Secure IT and service providers

All third-party providers are required to process data securely and in accordance with UK GDPR.

8. International Transfers

Where service providers are located outside the UK, appropriate safeguards will be implemented, such as UK-approved Standard Contractual Clauses

9. Data Retention

We retain personal data only for as long as necessary to:

• Deliver services

• Fulfil contractual obligations

• Comply with legal requirements

Coaching notes and programme records are typically retained for up to 24 months following programme completion unless a longer period is required by law.

Marketing data is retained until you unsubscribe or request deletion.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data.

Coaching notes are stored separately and securely from general operational systems.

11. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Request rectification

• Request erasure (where applicable)

• Restrict processing

• Object to processing

• Request data portability (where applicable)

• Withdraw consent (where consent applies)

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk

To exercise your rights, contact:
privacy@recruithuman.co.uk

12. Cookies

Our website may use cookies and similar technologies. Please refer to our Cookie Policy for further details.