Privacy – LimeHub HR

Privacy Notice

1. Who We Are

LimeHub HR Ltd (“we”, “us”, “our”) is a UK-based HR consultancy and fractional HR director service.

Our contact details are:

Telephone number|: 07718 953664

LimeHubhr is the Data Controller for any personal data that you supply to us as part of the services you are contracted to receive from us. As our client, you are our data subject.

2. The Data We Collect

We collect and process personal data only where necessary. This may include:

Identity data: name, job title, employer.
Contact data: email address, telephone number, postal address.
Engagement data: enquiry details, call notes, proposals, contracts, service history.
HR advisory data (client work): employee records, conduct, attendance, pay, performance information, and—where relevant—health or medical details.
Website and technical data: IP address, browser type, device information, and usage data (via cookies).
Marketing preferences: consent or opt-out details.

We may also receive data from publicly available sources such as Companies House, LinkedIn, or referrals.

3. How We Use Your Data and Lawful Bases

We process data only when a lawful basis under UK GDPR applies:

Purpose	Lawful Basis
Responding to enquiries	Legitimate interests (to operate our business and respond to contacts).
Delivering HR consultancy services	Contract (if engaged directly) or legitimate interests (if engaged by your employer).
Processing special category data (e.g. health)	Employment law obligations or establishing/defending legal claims.
Business operations, record keeping, compliance	Legal obligation and legitimate interests.
Marketing communications	Consent (where opted-in) or legitimate interests (business-to-business communication).
Website analytics and cookies	Consent for non-essential cookies; legitimate interests for essential cookies.

LimeHub HR does not use automated decision-making or profiling.

4. Who We Share Data With

We may share your data with:

Professional advisers (lawyers, accountants, insurers).
Associate consultants working under our instruction.
Technology and system providers (email, document storage, hosting).
The client company that engaged us (for HR casework).
Regulators or law enforcement, if legally required.

LimeHubhr does not sell personal data.

5. International Transfers

We store data only on secure servers within the UK.
We do not transfer personal data outside the UK or EEA.

6. Data Retention

We keep data only as long as necessary:

Enquiries: up to 24 months after last contact.
Client HR case files: 6 years after project completion.
Financial records: 6 years plus the current financial year (to meet HMRC requirements).

After this period, data is securely deleted or anonymised.

7. AI Systems & Automated Decision-Making

When we use AI systems in HR-related processes, we:

Identify whether they are high-risk AI systems under the EU AI Act (e.g., recruitment screening tools)
Conduct data protection impact assessments (DPIAs) under the UK GDPR
Maintain human oversight for any decisions affecting individuals’ rights or opportunities
Provide clear information to affected individuals that AI is being used and how it may impact them
Offer a right to contest any AI-assisted decision and request human review

8. Your Rights

Under UK GDPR, you have the right to:

Access your personal data.
Correct inaccurate or incomplete data.
Request erasure (“right to be forgotten”).
Restrict or object to processing.
Request data portability.
Withdraw consent at any time (for marketing or where consent is the lawful basis).

To exercise these rights, contact [email protected].

You also have the right to complain to the Information Commissioner’s Office (ICO):
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
www.ico.org.uk | Tel: 0303 123 1113

9. Cookies

Our website uses cookies and similar technologies to improve performance and security.

Essential cookies: used for core functionality (do not require consent).
Analytics or marketing cookies: used only with your consent.

You can change your cookie preferences at any time through your browser settings.

10. Updates

We may update this policy periodically to remain compliant with UK GDPR and future data protection reforms.

The version published on our website is the current one.