Privacy policy

Last updated: June 2026

Smart Consultancy HR Limited ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect when you visit hrsmartnow.com or engage our services, why we collect it, and the rights you have. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Smart Consultancy HR Limited is a company registered in England and Wales under company number 10746435, with its registered office at 18 Tynsall Avenue, Redditch, England, B97 5SE. For the purposes of data protection law, we are the "data controller" of the personal data we hold about you.

If you have any questions about this policy or about how we handle your data, please contact us at info@hrsmartnow.com.

2. Information we collect

We may collect and process the following types of personal data:

• Contact and enquiry data: your name, business name, email address, telephone number and the details of any enquiry you send us through our website, by email or by phone.
• Client data: information we need to deliver our HR services to you, which may include details about your business and, where relevant to an engagement, information about your employees.
• Correspondence: records of our communications with you, including emails, letters, notes of calls and meetings.
• Technical data: when you visit our website we may collect limited technical information such as your IP address, browser type and pages viewed, where you have permitted this.

Where our work involves information about your employees or other individuals, you remain the controller of that data and we act as a processor on your behalf, under the terms of our engagement.

3. How we use your information

We use personal data to:

• respond to your enquiries and provide the information or quotation you request;
• deliver the HR consultancy services we have agreed to provide;
• manage our relationship with you, including administration, invoicing and record-keeping;
• comply with our legal and regulatory obligations;
• improve our website and services; and
• where you have agreed, send you relevant updates about our services.

4. Our lawful bases for processing

We rely on one or more of the following lawful bases under UK GDPR:

• Contract: where processing is necessary to provide services you have requested or to take steps before entering into a contract.
• Legitimate interests: to respond to enquiries, run and promote our business, and keep proper records, provided your interests and rights do not override ours.
• Legal obligation: where we must process data to comply with the law.
• Consent: where you have given clear consent, for example to receive marketing communications. You can withdraw consent at any time.

5. Sharing your data

We do not sell your personal data. We may share it with trusted third parties only where necessary, including:

• service providers who support our business (for example IT, email, document storage and accounting providers), who are bound to protect your data;
• professional advisers such as accountants, insurers and lawyers where required;
• regulators, government bodies or law enforcement where we are legally required to do so.

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this policy, including to meet any legal, accounting or reporting requirements. Enquiry data that does not become a client relationship is generally held for a limited period and then deleted. Client records are retained for the duration of our engagement and for a reasonable period afterwards in line with our legal obligations.

7. How we protect your data

We take appropriate technical and organisational measures to keep your personal data secure and to guard against unauthorised access, loss or misuse. While no transmission over the internet can be guaranteed to be completely secure, we work to protect your information and maintain procedures to deal with any suspected data breach.

8. Your rights

Under UK data protection law you have the right to:

• be informed about how we use your data;
• request access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data in certain circumstances;
• restrict or object to our processing in certain circumstances;
• request the transfer of your data (data portability); and
• withdraw consent where we rely on it.

To exercise any of these rights, please contact us at info@hrsmartnow.com. We will respond within the timescales required by law.

9. Cookies

Our website may use cookies and similar technologies to help it function and to understand how it is used. Essential cookies are needed for the site to work. Any non-essential cookies (for example analytics) will only be used where you have agreed. You can control cookies through your browser settings; blocking some cookies may affect how the site works.

10. International transfers

We aim to store and process your data within the UK. Where any of our service providers process data outside the UK, we take steps to ensure an appropriate level of protection is in place as required by UK data protection law.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date of the most recent update shown at the top.

12. Contact and complaints

If you have any questions, requests or concerns about how we handle your personal data, please contact us at info@hrsmartnow.com or by post at the registered office address above.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk. We would, however, appreciate the chance to address your concerns first.