Data protection
Privacy and GDPR
How FloHRC collects, uses and protects personal information under UK GDPR and the Data Protection Act 2018. The summary below covers the essentials; the full policy follows.
The summary
Who we are
Dawn Farnell, trading as Flo HR Consultant, is the data controller for information collected through this website. Kents Hill, MK7 6HA.
What we collect
Details you give us when you book a call, send a message or sign up for updates: name, work email, phone, company and your enquiry.
Why we use it
To reply to you, arrange and hold consultations, and send updates you asked for. We rely on our legitimate interests, steps you ask for before a contract, or your consent.
Who we share it with
Only the services that run this website and our bookings, such as Microsoft for Teams calls and calendars. We never sell your data.
How long we keep it
Only as long as we need it: enquiries and calls that don’t lead to work for 12 months, and update sign-ups until you unsubscribe.
Cookies
We use essential cookies to run the site and, with your consent, analytics cookies. Change your choice under Cookie settings.
Your rights
You can use any of these rights free of charge. We reply within one month.
Make a data request- See the information we hold about you
- Have it corrected
- Have it deleted
- Limit how we use it
- Object to us using it
- Get a copy to take elsewhere
- Withdraw consent at any time
- Complain to the Information Commissioner’s Office
Full privacy policy
1. Who we are
This website is run by Dawn Farnell, trading as Flo HR Consultant. Dawn is the data controller, which means she decides how and why your personal data is used and is responsible for looking after it.
| Business | Dawn Farnell T/A Flo HR Consultant |
| Address | Kents Hill, MK7 6HA |
| Privacy questions and requests | privacy@flohrc.co.uk |
| Phone | 01908 927723 |
Flo HR Consultant is not required to appoint a Data Protection Officer. Questions about this policy go to privacy@flohrc.co.uk.
2. What we collect and why
We only collect the details you give us through the website, plus what is needed for the site to work. We don’t sell your data, and we don’t make automated decisions about you.
| What you do | What we collect | Why | Lawful basis |
|---|---|---|---|
| Send a message | Name, email, phone (optional), company, your message | To reply to your enquiry | Legitimate interests: answering people who contact us |
| Book a free call | Name, email, company, phone (optional), what you’d like to discuss, the time you chose | To arrange and hold the Teams call | Steps you ask us to take before a possible contract |
| Build a Bespoke plan and book a call | The services you chose, plus the booking details above | So the consultant can prepare for your call | Steps you ask us to take before a possible contract |
| Sign up for update alerts | Email address, and the date and way you confirmed | To email you about April and October law changes | Consent, which you can withdraw at any time |
| Accept analytics cookies (if we add them) | How you use the site, in a form that doesn’t identify you by name | To see which pages help visitors and improve the site | Consent, given in the cookie banner |
| Visit any page | Technical details such as your IP address and browser, kept in the website’s server logs | To keep the site secure and working | Legitimate interests: running a secure website |
You don’t have to give us any of these details. Without your name and email we can’t reply to a message or book a call.
If you become a client, how we handle your data under that engagement is covered by the data protection terms in your HR Partnership Agreement, not this website policy.
3. Who we share it with
A few trusted companies handle your data for us, only to provide their service and under contract with us. They are our processors: they can’t use your data for their own purposes.
| Company | What they do for us | Your data involved |
|---|---|---|
| Microsoft (Microsoft 365, Outlook and Teams) | Email, our calendar and the Teams calls you book | Messages, booking details, Bespoke plans |
| GoDaddy | Hosts the website and its server logs | Messages as they’re sent, server logs |
| Google (Google Analytics, only if added) | Measures how the site is used | Analytics data, only with consent |
We may also share data if the law requires it, for example with a regulator or the police.
Outside the UK. Some of these companies may store or access data outside the UK, for example in the European Economic Area or the United States. When they do, they use the safeguards UK law requires, such as a UK adequacy decision, the UK-US data bridge or approved contract terms.
4. How long we keep it
We keep your data only as long as we need it, then delete it.
| Data | How long |
|---|---|
| Messages that don’t lead to work | 12 months after our last reply |
| Booked calls and Bespoke plans that don’t lead to work | 12 months after the call |
| Update alert sign-ups | Until you unsubscribe, then removed within 30 days |
| Analytics data | 14 months, the analytics provider’s setting |
| Server logs | 30 days, set by the website host |
If you become a client, we keep your details for as long as your client terms say. The website itself doesn’t store messages, bookings or plans: they go straight to our email and calendar.
5. Your rights
You have rights over your personal data. To use any of them, email privacy@flohrc.co.uk or use the “Make a data request” button on this page. We reply within one month, and it’s free in most cases. We may ask you to confirm who you are first.
- Access: ask for a copy of the data we hold about you.
- Correction: ask us to fix anything wrong or incomplete.
- Deletion: ask us to delete your data.
- Restriction: ask us to pause using your data while a concern is looked into.
- Objection: object to us using your data for our legitimate interests.
- Portability: ask for data you gave us in a format you can take elsewhere, where we rely on consent or a contract.
- Withdraw consent: stop update alerts with the unsubscribe link in any alert, and change cookie choices with “Cookie settings” at the foot of every page. Withdrawing doesn’t affect what we did before.
Complaints. Please tell us first if you’re unhappy, and we’ll try to put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
6. Cookies
Cookies are small files a website saves in your browser. We use only the cookies the site needs to work unless you say yes to more.
| Type | What it’s for | Needs your consent? |
|---|---|---|
| Essential | Remembering your cookie choice (the wpta_cookie_choice cookie, kept for six months) and keeping forms secure. Your Bespoke plan is held in your browser in a similar way while you build it, and is cleared when you close the browser | No: the site can’t work properly without them |
| Analytics (not used yet) | Counting visits and seeing which pages help (Google Analytics’ _ga cookies, kept for up to two years) | Yes: only set if you accept them in the cookie banner |
When we first add analytics, a banner will ask before any analytics cookie is set. You can change your choice at any time with “Cookie settings” at the foot of every page.
7. Security, children and changes
Security. The website uses an encrypted (https) connection, and access to our email, calendar and website admin is protected by passwords and two-step sign-in.
Children. Our services are for businesses, and the website isn’t aimed at anyone under 18.
Changes. We’ll update this policy when the way we use data changes, and show the date it was last updated at the top of the page.
Contact. Questions about this policy or your data: privacy@flohrc.co.uk, or write to Dawn Farnell T/A Flo HR Consultant at the address above.
Questions about your data? Email privacy@flohrc.co.uk