Enablement Group Ltd (“we”, “us”, “our”) is committed to protecting the personal data of everyone who visits our website or engages with our services. This Privacy Policy explains what information we collect, why we collect it, and how we handle it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are the data controller for the personal information processed through this website. If you have any questions about this policy or how we handle your data, please contact us using the details at the end of this page.
We collect personal information that you provide directly to us and information collected automatically when you visit our website. The types of personal data we may collect include:
- Contact details: name, email address, telephone number, and organisation name submitted via our enquiry form or direct correspondence.
- Usage data: pages visited, time spent on pages, referral source, browser type, and device information collected via analytics tools.
- Communication records: emails, telephone calls, and messages exchanged with our team.
- Professional information: role, sector, and organisational context provided voluntarily in the course of engaging our services.
We use the personal information we collect to deliver and improve our services, communicate with you, and meet our legal obligations. Specifically, we use your data to:
- Respond to your enquiries and provide the HR consultancy services you have requested.
- Send relevant information about our services, insights, or events where you have given consent or where we have a legitimate interest in doing so.
- Improve and maintain our website and understand how visitors engage with our content.
- Comply with our legal and regulatory obligations.
- Protect our business and website from fraud and security threats.
We rely on the following lawful bases to process your personal data under the UK GDPR:
- Legitimate interests: for example, responding to your enquiries, conducting analysis to improve our services, and maintaining the security of our systems.
- Contract: when processing is necessary to deliver services you have engaged us to provide.
- Legal obligation: where we are required to process data to comply with applicable law.
- Consent: where you have freely given, specific, and informed consent, such as subscribing to marketing communications.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact and newsletter data is retained for up to 36 months after our last meaningful interaction or until you withdraw consent, whichever is sooner. Data processed under a service contract is retained for seven years to meet statutory requirements. Analytics data is anonymised or deleted within 26 months. Google Drive backup archives expire after 90 days.
When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual.
Under UK data protection law, you have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you.
- Right to rectification: to ask us to correct inaccurate or incomplete data.
- Right to erasure: to request that we delete your data in certain circumstances.
- Right to restriction: to ask us to limit how we process your data.
- Right to portability: to receive your data in a structured, commonly used format.
- Right to object: to object to processing based on legitimate interests or for direct marketing.
- Rights related to automated decision-making: we do not make solely automated decisions that have a legal or similarly significant effect on you.
To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully.
We do not sell your personal data to third parties. We may share your data with trusted service providers who process it on our behalf, including Resend for email delivery and Google for private Drive backup storage, under data processing agreements that require them to maintain appropriate safeguards. We may also disclose your data where required by law or to protect our legal rights.
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Shirethorn House, Redcliff Rd, Hessle, HU13 0EY
hello@enablementgroup.co.uk
