Privacy Policy
Last updated: October 2025
High Performing HR Ltd. (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website [www.highperforminghr.com] (“Site”), contact us, or engage with our services.
Who we are
High Performing HR Ltd. Company Number: 14281397 Registered Office: Bedford
We are the data controller responsible for your personal data collected via this Site.
What and how
How we collect your data
We may collect your personal data in a few different ways:
Directly from you: when you fill out forms, send us emails, call us, or talk to us in person.
From your organisation: if we’re working with your company, they might provide us with your details.
From public sources: we might gather information that is publicly available.
From our service providers: if other companies process data on our behalf, they may pass it to us.
What info do we collect?
We might collect and process the following personal details:
Name
Date of birth
Address
Email address
Phone number
Job title
IP address
Employer/organisation details
Associations or affiliations
Any other information you choose to give us while using our services.
In some cases, we might also process sensitive data (called “special category data”) if it’s relevant to our work.
How and why we use your data
Purpose of processing | Legal reason (UK GDPR) | Our legitimate interest
To contact you: Legitimate interests – Article 6(1)(f)
Responding to your questions and providing you with relevant information: (same)
To send you information about our services: Consent – Article 6(1)(a) (non-clients); Legitimate interests – Article 6(1)(f) (existing clients)
Growing our business by keeping existing clients informed about services that might interest them: (same)
To provide our services to you: Contractual necessity – Article 6(1)(b)
To take payments from you: Contractual necessity – Article 6(1)(b); Legal obligation – Article 6(1)(c)
To send you articles and blogs: Consent – Article 6(1)(a) (non-clients); Legitimate interests – Article 6(1)(f) (existing clients)
Staying connected with clients and sharing useful resources: (same)
To receive information from your organisation to provide services: Contractual necessity – Article 6(1)(b)
To collect information from open sources to deliver services: Legitimate interests – Article 6(1)(f)
To share information with your organisation, law enforcement, or third-party providers: Legal obligation – Article 6(1)(c) (law enforcement); Contractual necessity – Article 6(1)(b) or Legitimate interests – Article 6(1)(f) (service delivery)
Automated decision-making We don’t use your personal data to make any decisions about you automatically, such as profiling, that would have a legal or other significant effect on you.
Third-Party Processors
Sometimes we need to share your data with other trusted companies to help us run our business. These might include:
Email and marketing platforms
Payment processors
Companies hosting our IT systems
Your employing organisation
Productivity platforms
Law enforcement or other regulatory bodies (if we are legally required to)
International Transfers
Some of our service providers and our associates are based outside of the UK, so your data might be transferred there. When this happens:
We rely on special legal agreements (like Standard Contractual Clauses or International Data Transfer Agreements) to ensure your data is still protected, no matter where in the world it travels.
If a country has a specific "adequacy decision" (meaning the UK has deemed their data protection laws to be good enough), we can rely on that decision. If you’d like to see a copy of these safeguards, just ask by emailing us at siobhan@highperforminghr.com.
Special Category Data
In our work, we occasionally need to process highly sensitive data, such as:
Racial or ethnic origin
Political opinions
Religious or philosophical beliefs
Trade union membership
Health data
Sexual orientation
The legal reason we can collect this type of information is typically with your explicit consent or if we have a legal obligation to do so (Article 6, UK GDPR). We also have specific conditions under Article 9 UK GDPR that allow us to process this data, such as your explicit consent or substantial public interest (if authorised by law). Because this data is so sensitive, we take extra care. This includes:
Data minimisation: we only collect what’s absolutely necessary.
Access controls: only people who need to see the data can access it.
Pseudonymisation: we try to remove direct identifiers where we can.
When we rely on UK law-based conditions (Schedule 1 of the Data Protection Act 2018), we also keep a specific document called an “Appropriate Policy Document” to explain how we meet our obligations.
We also conduct a “Data Protection Impact Assessment” (DPIA) when processing this type of data, as it is considered high-risk.
We will never upload your special category data to third-party marketing platforms unless we have your explicit consent and all the necessary contractual safeguards.
Your Rights
You have several important rights regarding your personal information:
Access your data: get a copy of the personal information we hold about you.
Limit your data: ask us to restrict the processing of your data in certain situations.
Correct your data: ask us to fix any information that you think is wrong or incomplete.
Object to us using your data: object to us processing your data in certain situations.
Delete your data: ask us to erase your personal information in certain situations.
Transfer your data: ask us to transfer the information you gave us to another organisation, or to you, in certain situations.
You won’t have to pay to exercise these rights, and we have one month to respond to your request.
How Long we Keep Your Data
We hold on to your personal data for up to 7 years from our last contact with you, unless we’re legally required to keep it for longer. Just so you know, our third-party processors may have their own backup and deletion schedules that might apply as well. If you want to find out more about this, please contact us at: siobhan@highperforminghr.com.
Consent and Withdrawal
If we’ve asked for your consent to do something with your data, you’re free to change your mind at any time. You can withdraw your consent by:
Clicking the “unsubscribe” link in any of our marketing emails.
Sending an email to siobhan@highperforminghr.com.
How to Complain
If you have any worries or a complaint about how we’re handling your data, please get in touch with us first at: siobhan@highperforminghr.com or via the form on our website. You can also always complain directly to the UK’s supervisory authority: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF 0303 123 1113 | www.ico.org.uk
You can manage cookie preferences via your browser settings .
For more details, see our full [Cookie Policy].
Changes to this policy
We may update this Privacy Policy occasionally to reflect changes in legislation or our services. Please check this page regularly. The latest version is always dated at the top.