Privacy policy

Introduction

Lemonade HR Ltd (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard any personal information you provide when using our website or engaging with our services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.

By using this website or providing your personal data, you agree to the terms of this Privacy Policy.

 

Data Controller & Data Processor Roles

When delivering HR consultancy and professional services, Lemonade HR Ltd is the Data Controller of any personal data you provide under our contractual agreements.

For certain third-party HR platforms we act as a Data Processor on behalf of our clients. In these instances, data processing is governed by the terms set by the client and relevant data protection agreements.

 

Information We Collect

We may collect the following types of personal data:

  • Website analytics data: IP address, browser type, device information, referral source, and site interactions (e.g., pages visited, links clicked).

  • Client and business contact information: Name, job title, company name, address, email, phone number, and other relevant business details.

  • Recruitment-related data: CVs, employment history, references, and other details provided for recruitment purposes.

  • Marketing preferences: Information regarding your preferences for receiving communications from us.

We do not collect special category data (such as health information) through our website unless explicitly required for a business engagement.

 

How We Use Your Information

We process your personal data for the following purposes:

Business Operations. Providing HR consultancy services and fulfilling contractual obligations. Managing client relationships, billing, and financial record-keeping.

Recruitment Services. Assessing suitability for job roles and providing candidate details to prospective employers (with consent).

Marketing & Communications. Sending HR insights, newsletters, or promotional material (opt-in basis only). Conducting market research to improve our services.

Website Analytics. Analysing website traffic to enhance user experience. Data is collected via Squarespace analytics and shared with Squarespace to measure site performance.

Legal & Compliance. To comply with legal obligations, regulatory requirements, or requests from law enforcement. In case of disputes, fraud prevention, or contractual enforcement.

We will never sell your data to third parties.

 

Legal Basis for Processing

We process personal data under the following lawful bases:

  • Contractual Obligation: To provide services you have engaged us for.

  • Legitimate Interests: For business operations, analytics, and service improvements.

  • Consent: For marketing communications and recruitment processing (you can withdraw consent at any time).

  • Legal Compliance: To meet regulatory or legal requirements.

 

Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this policy. Retention periods include:

  • Client records: Retained for up to seven years post-engagement for accounting and legal compliance.

  • Recruitment data: Retained for up to 12 months, unless an employer requires longer storage or consent is withdrawn earlier.

  • Website analytics: Retained for no longer than 26 months.

After these periods, data is securely deleted or anonymised.

 

Data Security

We implement technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss, including: Secure cloud storage and encrypted communications; Access restrictions to sensitive data; Regular security reviews and compliance monitoring.

 

Sharing of Data

We only share data in the following circumstances:

  • With authorised third-party providers (eg payroll systems) under strict data protection agreements.

  • With law enforcement or regulators when legally required.

  • With employers for recruitment purposes, but only when explicitly consented to.

 

Your Rights Under UK GDPR

Under UK GDPR, you have the following rights:

  • Right to Access – Request a copy of your personal data.

  • Right to Rectification – Correct inaccurate or incomplete data.

  • Right to Erasure (‘Right to be Forgotten’) – Request deletion of your data where legally applicable.

  • Right to Restrict Processing – Limit how we use your data.

  • Right to Object – Withdraw consent or object to certain processing activities.

  • Right to Data Portability – Request data in a structured, machine-readable format.

To exercise your rights, please contact us at Carol@LemonadeHR.com.

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

 

Links to Other Websites

Our website may contain links to external sites. We are not responsible for the privacy practices of other websites and encourage you to review their privacy policies.

___________________________________________

This policy was updated on 1st March 2025.  We regularly review and monitor regulatory guidance for any industry changes which may impact our business operations or your rights and freedoms.

We are legally known as Lemonade HR Ltd, and our registered office is at 82 Drovers Way, Hitchin, Hertfordshire SG5 3EQ United Kingdom. We are registered in England and Wales under company number 14905570 and our ICO Registration Number is ZB552458