Privacy Notice

Last updated: 1 October 2026

Lemonade HR Ltd respects your privacy. This notice explains how we handle personal information when you visit our website, contact us or use our HR consultancy and recruitment services.

We comply with the UK GDPR, the Data Protection Act 2018 and applicable privacy and electronic communications legislation, as amended.

Who we are

Lemonade HR Ltd is registered in England and Wales, company number 14905570.
ICO registration: ZB552458
Privacy enquiries: Carol@LemonadeHR.com

We act as a data controller for information used to manage our business and services. Where we handle personal information solely on a client’s instructions, we act as a data processor, under a data processing agreement. The client’s privacy notice applies to that processing.

Information we collect

We may collect contact and business details, correspondence, billing records, recruitment information, marketing preferences and website usage information.

We receive information directly from you and, where relevant, from clients, employers, referees and recruitment partners.

HR engagements may involve sensitive information, such as health information. We process this only where necessary and where additional legal requirements are met. Please contact us before sending sensitive information through our website.

Why we use your information

We use personal information to:

  • Respond to enquiries, manage relationships and deliver services, relying on contract where you are personally a party to it, or legitimate interests in running our business and serving clients.

  • Support recruitment, relying on legitimate interests, or contract where applicable. We obtain your agreement before submitting your identifiable details to prospective employers.

  • Maintain statutory records and meet legal requirements, relying on legal obligation.

  • Send newsletters and promotional emails, relying on consent. You can unsubscribe at any time.

  • Improve our website, relying on consent where required, or legitimate interests where permitted.

  • Handle complaints, prevent fraud and protect our legal rights, relying on legitimate interests.

Where we rely on legitimate interests, we consider your rights and the impact on you. If information is necessary to provide a service, we will explain this when collecting it.

Website and cookies

Our website uses Squarespace for hosting and analytics. Technical and usage information may be shared with Squarespace.

We obtain consent for cookies and similar technologies where required by law.

Sharing your information

We do not sell your personal information. Where necessary, we share it with clients, prospective employers with your agreement, trusted service providers, professional advisers and authorities where legally required.

How long we keep information

Our usual retention periods are:

  • Client and financial records: up to seven years after an engagement ends.

  • Recruitment records: up to 12 months after recruitment activity ends.

  • Website analytics: no longer than 26 months.

  • Marketing records: until you unsubscribe or they are no longer needed. We may keep a minimal opt-out record.

These periods must reflect our actual practices. Records may be kept longer where necessary for legal obligations or claims. Information held on a client’s behalf is retained, returned or deleted according to their instructions.

We securely delete or anonymise information when it is no longer needed.

Security

We use appropriate security measures, including access controls and secure storage, to protect personal information against unauthorised access, disclosure and loss.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restricted use or transfer of your information.

You can object to processing based on legitimate interests and object to direct marketing at any time. You can also withdraw consent where we rely on it.

Contact Carol@LemonadeHR.com to exercise your rights or raise a concern. We normally respond to rights requests within one month. Where we act for a client, we will help direct your request to them.

You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Other websites and updates

External websites have their own privacy notices. We review this notice regularly and publish updates here.