Privacy Policy of Umber HR

Welcome to Umber HR. This Privacy Policy describes how Umber HR ("we", "us", or "our") collects, uses, and discloses your personal data when you visit our site or use our comprehensive HR solutions, including talent acquisition, employee relations, performance management, HR strategy & consulting, compensation & benefits, and training & development.

1. Information We Collect

We collect various types of information, including personal data, to provide and improve our services.

• Information You Provide Directly: This includes information such as your name, contact details (email address, phone number, address), professional title, company name, CVs, cover letters, educational background, employment history, and any other information you provide when using our talent acquisition forms, contacting us for inquiries, or engaging in HR consulting services.
• Information Collected Automatically: When you visit our website, we may automatically collect certain information about your device, including your IP address, browser type, operating system, referring URLs, access times, and pages viewed. This helps us understand how our services are used and to improve your browsing experience.
• Information from Third Parties: In some cases, for talent acquisition or background checks (with your explicit consent), we may receive information from third-party sources, such as professional networking sites, former employers, or educational institutions.

2. How We Use Your Information

We use the collected information for various purposes, primarily to deliver our HR solutions effectively.

• To provide and manage our comprehensive HR services, including talent acquisition, employee relations, performance management, HR strategy & consulting, compensation & benefits, and training & development.
• To communicate with you, respond to your inquiries, and provide customer support.
• To process job applications and assess candidate suitability for roles.
• To improve our website functionality, services, and user experience.
• To comply with legal obligations and regulatory requirements.
• For internal research and analysis to enhance our service offerings.

3. Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds:

• Consent: Where you have given explicit consent for specific processing purposes, such as for receiving marketing communications or for certain talent acquisition activities.
• Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., providing HR consulting services).
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject (e.g., tax, employment laws).
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided that these interests are not overridden by your fundamental rights and freedoms (e.g., improving our services, preventing fraud).

4. Disclosure of Your Information

We may share your personal data with third parties in the following circumstances:

• Service Providers: We may engage third-party service providers (e.g., IT support, cloud hosting, analytics providers) to assist us in providing and managing our services. These providers are obligated to protect your data and only use it for the purposes we specify.
• Clients (for Talent Acquisition): If you are a job candidate, your personal data (e.g., CV) may be shared with our clients for recruitment purposes, with your consent.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The precise retention period will depend on the type of data and the specific purpose for which it was collected.

6. Your Data Protection Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have certain rights regarding your personal data:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request diligently and in accordance with applicable data protection laws.

7. Security of Your Data

We prioritize the security of your personal data and implement appropriate technical and organizational measures to protect it from unauthorized access, accidental loss, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure.

8. International Data Transfers

As a company based in the UK, any processing of your personal data will primarily occur within the UK and the European Economic Area (EEA). If we ever need to transfer your personal data outside the UK or EEA, we will ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or the UK Information Commissioner's Office, to protect your data.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any updates.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Company Name: Umber HR
• Address: unnamed road, UK, UK, DG8 8DR, UK

This Privacy Policy ensures compliance with the GDPR and other relevant data protection laws.