Privacy Notice

Elliott HR Limited is committed to protecting your personal information and handling it responsibly.

This Privacy Notice explains how we collect, use, store and protect personal information and your rights in relation to that information.

Who we are

Elliott HR Limited is an independent HR consultancy providing HR and employee relations advice and support to employers.

Elliott HR Limited
Company number: 16018256
Registered office: 1 Royston Close, Friston, Eastbourne, East Sussex, BN20 0EY
Email: hello@elliotthr.co.uk
ICO registration reference: ZB917951

Our role

Depending on the circumstances, Elliott HR may act as either a data controller or a data processor.

When Elliott HR is the data controller

We are the data controller when we decide how and why personal information is used. This includes information relating to enquiries, prospective and existing clients, our business contacts, invoicing and the administration and operation of Elliott HR.

This Privacy Notice primarily explains how we use personal information in these circumstances.

When Elliott HR is a data processor

When we provide HR consultancy services to a client, we may receive and process personal information about its employees, workers, applicants or other individuals on the client's behalf.

In these circumstances, the client will normally be the data controller and Elliott HR will act as its data processor. We process that information in accordance with the client's instructions and our contractual obligations to the client.

If your personal information is being processed by Elliott HR on behalf of your employer or another organisation and you have questions about how your information is being used, you should normally contact that organisation.

Information we may collect

Where Elliott HR acts as data controller, depending on your relationship with us, we may collect and use information including:

  • your name, job title and contact details;

  • information you provide when you contact us or make an enquiry;

  • information relating to our work with you or your organisation;

  • correspondence and records of communications;

  • invoicing, payment and accounting information; and

  • other information you choose to provide to us.

How we obtain your information

We normally receive personal information directly from you, for example when you contact us by email, telephone, through our website or in the course of our work with you.

We may also receive information from the organisation you work for, professional contacts, advisers or other people involved in a matter, or from publicly available sources where relevant to our work or business relationship.

How we use your information

We may use personal information to:

  • respond to enquiries;

  • provide and manage our HR consultancy services;

  • communicate with clients and prospective clients;

  • manage our client and business relationships;

  • prepare invoices and maintain financial and business records;

  • meet our legal, regulatory and professional obligations; and

  • manage and develop Elliott HR and our services.

Our lawful basis for using your information

Our lawful basis will depend on why we are using your information.

We may process personal information where:

  • it is necessary to take steps at your request before entering into a contract or to perform a contract with you;

  • it is necessary for our legitimate interests in running Elliott HR, managing client and business relationships and providing and developing our services, provided those interests are not overridden by your rights and interests;

  • we need to comply with a legal obligation; or

  • you have given your consent, where consent is appropriate.

Where we rely on consent, you can withdraw that consent at any time by contacting us.

Sharing your information

We do not sell personal information.

We may share information where reasonably necessary with:

  • technology and cloud service providers that support the operation of Elliott HR;

  • professional advisers, insurers or other specialist advisers where appropriate;

  • regulatory, government or law enforcement bodies where required by law; or

  • other parties where you have authorised us to do so or where there is another lawful basis for sharing the information.

Where service providers process personal information on our behalf, we take appropriate steps to ensure suitable data protection arrangements are in place.

International transfers

Some technology or service providers may process or store information outside the UK.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable data protection legislation and that appropriate safeguards are in place where required.

How long we keep your information

We only keep personal information for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, regulatory, insurance and legitimate business requirements.

Retention periods vary depending on the nature of the information and our relationship with you. We periodically review the information we hold and securely delete information that is no longer required.

Keeping your information secure

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal information is limited to those who need it for legitimate business purposes.

Use of Artificial Intelligence

Elliott HR may use artificial intelligence tools to support research, drafting and the development of HR advice and documentation.

We do not enter or upload identifiable employee information, client documents or other confidential client information into these tools.

We do not use artificial intelligence to make solely automated decisions about individuals which have legal or similarly significant effects. Advice provided by Elliott HR is reviewed and remains the responsibility of Elliott HR.

Your rights

Depending on the circumstances and the lawful basis on which we use your information, you may have the right to:

  • access the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to delete your personal information in certain circumstances;

  • ask us to restrict how we use your information;

  • receive certain personal information in a portable format; and

  • withdraw consent where we rely on consent.

Your right to object

Where we process your personal information on the basis of legitimate interests, you may have the right to object to that processing.

If you wish to exercise any of your rights, please contact Elliott HR using the details above.

Complaints

If you have concerns about how Elliott HR has handled your personal information, please contact us in the first instance so that we have an opportunity to address your concerns.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Further information is available from the Information Commissioner's Office.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our services, working practices or legal requirements. The latest version will be available on our website.

Last Updated: August 2026