Privacy Notice
Who we are
This notice is issued by The Workplace Compliance Company Ltd, registered in England and Wales under company number 17330424, with its registered office at 167–169 Great Portland Street, 5th Floor, London W1W 5PF.
Scope of this notice
This notice covers personal data we collect through workplacecompliance.co. It does not cover the specialist businesses in our portfolio, which issue their own privacy notices, including Right to Work Company at righttoworkcompany.com.
Personal data we collect
When you use our contact form, we collect the information you provide: first name, last name, work email address, organisation, enquiry type and message content. If you consent to optional cookies, we also collect aggregate website usage data, such as which pages you visit and how you arrived at the site.
How we use personal data
We use contact-form information to respond to your enquiry and to maintain a record of business correspondence. We use analytics data, where consented, to understand how the website is used and to improve it.
Legal bases
We process contact-form data on the basis of our legitimate interest in responding to enquiries and, where relevant, to take steps ahead of entering into a contract. We process analytics data on the basis of your consent, given or withdrawn through the cookie banner.
Sharing data
We do not sell personal data. We share it only with service providers who help us operate this website, acting under our instructions and only for that purpose:
| Provider | Purpose | Data involved |
|---|---|---|
| Vercel Inc. | Website hosting and delivery | Technical/connection data for all site visitors |
| Resend (Resend, Inc.) | Delivering contact-form enquiries by email | Contact-form submissions only |
| HubSpot, Inc. | Website analytics, where you have consented to optional cookies | Aggregate visit and usage data for consenting visitors |
International transfers
Vercel, Resend and HubSpot may process data on infrastructure located outside the UK, including in the United States. Where this happens, we rely on the following safeguards:
- Vercel transfers UK personal data under the UK International Data Transfer Addendum (IDTA) to the EU Standard Contractual Clauses, and EEA/Swiss personal data under the EU Standard Contractual Clauses.
- Resend is certified under the UK Extension to the EU–US Data Privacy Framework, and also relies on the UK Standard Contractual Clauses where applicable.
- HubSpot is certified under the EU–US Data Privacy Framework and also relies on the EU Standard Contractual Clauses, modified by the UK Addendum for transfers of UK personal data.
Retention
This website does not maintain a separate database of enquiries. Contact-form submissions exist only as an email sent to our business mailbox, and are retained there as ordinary business correspondence: for as long as reasonably necessary to respond to you and keep a record of the exchange, for up to 24 months, after which they are deleted as part of routine mailbox housekeeping, unless we need to keep a message for longer to comply with a legal obligation or to establish, exercise or defend legal claims. Because there is no database, deletion is not automated; it depends on that ordinary housekeeping rather than a scheduled system process.
Your rights
Subject to applicable law, you may have rights to access, correct, erase or restrict the use of your personal data, and to object to or request the portability of certain processing.
Security
We use appropriate technical and organisational measures to protect personal data submitted through this website.
Contact and complaints
For questions about this notice, contact privacy@workplacecompliance.co. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this notice
We may update this notice from time to time. Material changes will be reflected by an updated date on this page.