PRIVACY POLICY

At HiRec, we take your privacy seriously. This Privacy Policy explains how we collect, use and protect your personal information when you visit our website, contact us, complete one of our assessments, join our mailing list or become a HiRec member.

Who we are

HiRec provides practical HR and recruitment resources, templates, guidance and training for business owners.

HiRec is operated by HiRec Ltd.

For data protection purposes, the data controller is:

HiRec Ltd
5 Brayford Square
London
E1 0SG

Email: [email protected]

Information we may collect

Depending on how you use HiRec, we may collect:

• Your name
• Your email address
• Your business or salon name, where provided
• Your contact details
• Information you provide when completing a HiRec assessment or form
• Information relating to your HiRec membership and account
• Payment and transaction information, although we do not store your full payment card details ourselves
• Your email and marketing preferences
• Information about how you use our website, membership platform and emails
• Technical information such as your IP address, browser and device information where collected through our website platform and cookies
• Any information you choose to provide when contacting us

Please do not provide sensitive personal information about your employees, clients or other individuals through general HiRec forms unless we specifically ask you to do so.

How we use your information

We may use your personal information to:

• Provide and manage your HiRec membership
• Give you access to HiRec resources, templates, guidance and training
• Process and administer your subscription
• Send service messages relating to your membership or account
• Provide your results when you complete a HiRec assessment
• Respond to enquiries or requests for support
• Send you HR, recruitment and people management tips, updates and information about HiRec where you have agreed to receive them or where we are otherwise permitted to do so
• Improve our website, resources, communications and member experience
• Understand how our website and services are being used
• Maintain appropriate business, financial and administrative records
• Meet our legal and regulatory obligations
• Protect HiRec, our members and our services from misuse or fraud

Our lawful bases for using your information

Under UK data protection law, we need a lawful basis for processing your personal information.

The lawful basis we use will depend on why we are processing your information.

Contract

We may process your information where it is necessary to provide your HiRec membership or another service you have requested, administer your subscription or fulfil our obligations to you.

Consent

We may rely on your consent where you have actively chosen to receive marketing emails or where consent is otherwise required.

You can withdraw your consent at any time.

Legitimate interests

We may process information where it is reasonably necessary for our legitimate interests in operating, managing and improving HiRec, responding to enquiries, administering our business, protecting our services and understanding how they are being used, provided those interests do not override your rights and interests.

Legal obligation

We may process or retain information where necessary to comply with a legal, regulatory, tax or accounting obligation.

The ICO requires organisations to tell people both their purposes for processing and the relevant lawful basis. ICO

Emails and marketing

If you choose to join the HiRec mailing list, including through our Keep Me in the Loop form, we may send you practical HR and recruitment information, people management tips, relevant updates, new HiRec resources and information about HiRec membership and services.

You can unsubscribe at any time by using the unsubscribe link included in our marketing emails.

If you become a HiRec member, we may also send you service related communications that are necessary to administer your account, membership or subscription. These are different from marketing communications.

Where consent is required for marketing, you can withdraw that consent at any time. Once you unsubscribe, we will stop sending the relevant marketing communications, although we may retain limited information to record your preference.

Current ICO guidance requires marketing consent to be specific and informed where consent is relied upon and requires a simple means of opting out of subsequent marketing communications. ICO

Who we share your information with

We do not sell your personal information.

We may share personal information with trusted service providers where necessary to operate HiRec. These may include providers that help us with:

• Website hosting and membership management
• Email communications and marketing
• Payment processing
• Website analytics and functionality
• IT and technical support
• Accounting and financial administration
• Professional and legal services

These organisations may process personal information on our behalf or, in some circumstances, as separate data controllers. We expect organisations processing information on our behalf to protect it appropriately and only use it for the relevant purpose.

We may also disclose information where required by law, regulation or a competent authority, or where necessary to establish, exercise or defend legal rights.

International transfers

Some of the technology and service providers we use may process or store personal information outside the UK.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.

How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting and reporting requirements.

How long we retain information will depend on the type of information, why we hold it and any legal requirements that apply.

Membership and transaction records may need to be retained after your membership ends for legal, tax, accounting or record keeping purposes.

If you unsubscribe from marketing, we may retain limited information on a suppression list so that we can record and respect your preference not to receive further marketing.

Cookies

Our website may use cookies and similar technologies to enable the website to work, remember preferences, understand how the website is used and improve the user experience.

Some cookies may be necessary for the website to function. Where consent is required for other cookies or similar technologies, we will ask for your consent before using them.

You can find more information about the cookies we use and your choices in our Cookie Policy.

Your rights

Depending on the circumstances, UK data protection law gives you a number of rights over your personal information.

These may include the right to:

• Ask for access to the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your personal information in certain circumstances
• Ask us to restrict the way we use your information in certain circumstances
• Object to certain uses of your personal information, including direct marketing
• Ask for certain personal information to be transferred to you or another organisation
• Withdraw your consent at any time where we rely on consent

These rights do not all apply in every situation.

To exercise any of these rights, please contact us at [email protected].

Keeping your information secure

We take appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, alteration, disclosure, misuse or unauthorised access.

However, no internet based service or method of electronic storage can guarantee absolute security.

Third party links

Our website, emails or membership platform may contain links to websites or services operated by other organisations.

We are not responsible for the privacy practices of third party websites or services. We recommend reviewing their privacy information when visiting them.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to HiRec, the services and technology we use, or applicable law and regulatory guidance.

The latest version will be published on our website and the date at the top of this policy will be updated.

Contact us

If you have any questions about this Privacy Policy, how we use your personal information or would like to exercise your data protection rights, please contact: