23 January 2026

Laura Purdey HR Consulting customer privacy notice

Registered name: Purdess People Limited

We are the controller of your personal data. For more information on controllers and their responsibilities please see our guidance on data protection principles, definitions, and key terms.

This privacy notice tells you what to expect us to do with your personal information.

Contact details

Post

Integro Accounting Ltd, Lipton House, Stanbridge Buildings, Stanbridge Road, LEIGHTON BUZZARD, Bedfordshire, LU7 4QQ, GB

Telephone

07984662780

Email

laura@laurapurdey.co.uk

What information we collect, use, and why

We collect or use the following information to provide and improve products and services for clients:

  • Names and contact details
  • Addresses
  • Gender
  • Occupation
  • Date of birth
  • Call recordings. Where meetings or calls are recorded for note-taking purposes, this will only take place with the prior knowledge and agreement of all participants.
  • Third party information (such as family members or other relevant parties)
  • Payment details (including card or bank information for transfers and direct debits)
  • Transaction data (including details about payments to and from you and details of products and services you have purchased)
  • Employment details (including salary, sick pay and length of service)
  • Health information (such as medical records or health conditions)
  • Criminal records data (including driving or other convictions)
  • Information relating to compliments or complaints
  • Records of meetings and decisions

We also collect or use the following special category information to provide and improve products and services for clients. This information is subject to additional protection due to its sensitive nature:

  • Trade union membership
  • Health information

We collect or use the following personal information for the operation of client or customer accounts:

  • Names and contact details
  • Addresses
  • Purchase or service history
  • Account information, including registration details
  • Information used for security purposes
  • Marketing preferences

We collect or use the following personal information for information updates or marketing purposes:

  • Names and contact details
  • Marketing preferences
  • Purchase or account history

We collect or use the following personal information to comply with legal requirements:

  • Name
  • Contact information
  • Identification documents
  • Client account information
  • Any other personal information required to comply with legal obligations
  • Criminal offence data

We also collect or use the following special category information to comply with legal requirements. This information is subject to additional protection due to its sensitive nature:

  • Trade union membership
  • Health information

We collect or use the following personal information for recruitment purposes:

  • Contact details (eg name, address, telephone number or personal email address)
  • Date of birth
  • National Insurance number
  • Copies of passports or other photo ID
  • Employment history (eg job application, employment references or secondary employment)
  • Education history (eg qualifications)
  • Right to work information
  • Details of any criminal convictions (eg Disclosure Barring Service (DBS), Access NI or Disclosure Scotland checks )

We also collect or use the following special category information for recruitment purposes. This information is subject to additional protection due to its sensitive nature:

  • Health information

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details
  • Addresses
  • Payment details
  • Account information
  • Purchase or service history
  • Call recordings
  • Witness statements and contact details
  • Relevant information from previous investigations
  • Customer or client accounts and records
  • Financial transaction information
  • Correspondence

We also collect or use the following special category information for dealing with queries, complaints or claims. This information is subject to additional protection due to its sensitive nature:

  • Trade union membership
  • Health information

Lawful bases and data protection rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO's website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • We process personal information as part of delivering professional HR consultancy, mediation, coaching, TUPE and workforce transfer services to organisational clients. This processing is necessary to understand workplace context, manage employee relations issues, support lawful employment transfers, and provide accurate, effective advice and outcomes for both organisations and individuals involved. The use of personal information in this way benefits clients and affected individuals by supporting fair decision-making, lawful compliance, and early resolution of workplace issues. Processing is limited to what is relevant and proportionate, handled confidentially, and subject to appropriate safeguards to minimise any impact on individuals' rights and freedoms.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • We process limited personal information to operate and manage client or customer accounts, including maintaining contact details, managing contracts, invoicing, and ensuring secure access to services. This processing is necessary to deliver services effectively, meet contractual and legal obligations, and maintain accurate records. The use of personal information in this context benefits clients by enabling clear communication, accurate billing, and secure handling of their account information. Processing is limited to what is necessary, handled securely, and does not override individuals' rights or interests.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • We use limited contact information to provide relevant service updates or professional information to existing or prospective clients where there is a reasonable expectation of contact. This may include sharing information about services that are directly relevant to an individual's role or previous engagement with us. This processing benefits recipients by keeping them informed of services or developments that may be of interest, and is carried out in a proportionate and non-intrusive way. Individuals are able to opt out of marketing communications at any time, and we do not engage in bulk marketing, profiling, or data sharing for marketing purposes.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information to comply with legal requirements:

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for recruitment purposes are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • Where recruitment support is provided as part of HR consultancy services, we process personal information to assess suitability for roles, support fair recruitment processes, and help organisations meet employment law and right-to-work obligations. This processing is necessary to enable informed decision-making and to ensure recruitment processes are lawful, consistent and fair. The use of personal information in this context benefits both organisations and candidates by supporting transparent recruitment outcomes and compliance with legal requirements. Processing is limited to relevant information, handled securely, and does not override individuals' rights or interests.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • We process personal information to respond to queries, investigate complaints, and manage claims or disputes relating to our services. This processing is necessary to understand concerns raised, establish relevant facts, respond appropriately, and meet professional, legal, or insurance obligations. The use of personal information in this context benefits individuals by ensuring concerns are handled fairly, accurately, and in a timely manner. Processing is limited to information that is relevant to the issue raised, handled confidentially, and does not override individuals' rights or interests.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Where we get personal information from

  • • Directly from you
  • • Legal bodies or professionals (such as courts or solicitors)
  • • Publicly available sources
  • • Suppliers and service providers
  • • Third parties:
    • Third parties may include organisational clients, transferring or receiving employers in the context of TUPE and workforce transfers, professional advisers such as solicitors or employment lawyers, and other organisations involved in the delivery of HR, mediation, coaching, or recruitment support services. Where relevant, this may also include recruitment agencies, assessment providers, or benefits and pension administrators acting on behalf of a client. Personal information is only obtained where necessary for the provision of services and in accordance with client instructions.

How long we keep information

We retain personal information only for as long as necessary for the purposes it was collected. Retention periods are set out in our internal data retention schedule and are reviewed regularly.

In most cases, client and case-related information is retained for up to six years after the end of an engagement, in line with legal, tax, and professional indemnity requirements. Audio recordings and transcripts are deleted once notes are finalised or within a short, defined period.

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

Who we share information with

Data processors

Secure transcription and meeting note-taking software providers (international SaaS providers operating under UK GDPR safeguards)

This data processor does the following activities for us: These providers process audio recordings and generate transcripts and summaries of online meetings or calls on our behalf to support accurate note-taking and service delivery. Processing is carried out under our instructions and subject to appropriate data protection safeguards.

IT systems, secure email, and cloud storage providers (UK / EEA and international providers)

This data processor does the following activities for us: These providers host and store business data securely, including client records, correspondence, and documentation, and support the secure operation of our IT and communications systems.

Others we share personal information with

  • • Insurance companies, brokers or other intermediaries
  • • Professional or legal advisors
  • • Organisations we're legally obliged to share personal information with
  • • Professional consultants
  • • Third parties:
    • Professional advisers such as solicitors, employment lawyers, accountants, or insurers, where necessary to obtain advice, manage disputes, or comply with legal or professional obligations.
    • Organisational clients and other relevant third parties involved in the delivery of HR consultancy services, including transferring or receiving employers in the context of TUPE and workforce transfers, and other parties acting on behalf of a client where appropriate.

Sharing information outside the UK

Where necessary, our data processors will share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

Organisation name: Cloud-based IT, email, storage and transcription service providers

Category of recipient: IT and software-as-a-service providers supporting business operations

Country the personal information is sent to: Outside the UK (including EEA and other countries)

How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the ICO.

The ICO's address:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Cookies

This website uses essential cookies only to ensure it functions correctly and securely.

Last updated

23 January 2026