Privacy Policy

Human-Resources.org is a trading name of EmployerHQ Limited ("we", "us"). We are the data controller for personal data collected through this website and we handle it in line with the UK GDPR and the Data Protection Act 2018.

Who we are and how to contact us

• Controller: EmployerHQ Limited, registered in England and Wales.
• Data protection contact: submit a request through our contact page and mark it as a data protection query.
• General enquiries: use the forms on our contact page.

The personal data we collect

• Enquiry details. Name, work email, phone number, organisation, approximate headcount and the description of what you need help with, plus the page you enquired from.
• Provider accounts. Email address, password (stored hashed by our authentication provider), the company you claim, your role and any listing edits you submit.
• Billing data. If you buy a claimed listing, our payment processor handles your card details. We never see or store full card numbers.
• Technical and usage data. IP address, browser and device type, pages viewed and referring pages. Listing view counts are aggregated and not used to identify you.

Why we use it, and our lawful basis

• To respond to your enquiry and introduce you to relevant providers - legitimate interests, and where we pass your details to a provider, your consent given when you submit the form.
• To run provider accounts, claims and listing edits - performance of a contract with the provider.
• To take payment for claimed listings and keep accounting records - contract and legal obligation.
• To keep the site secure, prevent abuse and fix faults - legitimate interests.
• To measure how pages perform - consent, through the cookie banner. See our Cookie Policy.

Who we share it with

We share enquiry details with the HR providers relevant to your request so they can reply to you. Those providers are separate controllers of the data once they receive it and their own privacy notices apply. We also use processors who act only on our instructions:

• Hosting, database and authentication infrastructure.
• Email delivery for confirmations and notifications.
• Payment processing for claimed listings.

We do not sell your personal data. Where a provider is outside the UK or EEA, transfers are covered by adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

How long we keep it

• Enquiries: 24 months from your last contact with us.
• Provider accounts and listing history: while the account is open, then 12 months.
• Billing and accounting records: 6 years, as required by UK tax law.
• Server and security logs: up to 12 months.

Your rights

Under the UK GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have data erased where we no longer need it;
• restrict or object to processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, including cookie consent;
• opt out of marketing in any message we send you.

Send a request through our contact page to exercise any of these. We respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Automated decision-making

We do not carry out automated decision-making or profiling that has a legal or similarly significant effect on you. Directory rankings are editorial and are applied to companies, not to individuals.

Children

This is a business-to-business site and is not intended for anyone under 16. We do not knowingly collect data about children.

Changes to this policy

We update this policy when our processing changes and revise the date above. Material changes are highlighted on the site.