Privacy Notice

EB People Consulting

Client Privacy Statement

EB People Consulting respects your privacy and is committed to protecting your personal information.

We only collect the information we need to respond to enquiries, deliver our HR consultancy services, and manage our business. This may include contact details and, where we support clients with people matters, employee information provided to us by our clients.

We do not sell personal data and only share information with trusted third parties where necessary to deliver services or meet legal obligations.

You have rights over your personal data, including the right to access, correct or request deletion of your information.

For full details on how we use and protect personal data, please read our Privacy Notice or contact us at emma@ebpeople.com.

1. Introduction

EB People Consulting (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, store and protect your personal data when you interact with us, including when you visit our website or engage our services.

We act as a data controller for the purposes of UK data protection law, except where stated otherwise below.

This Privacy Notice is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The personal data we collect

When you contact us, use our website, or engage our services, we may collect the following information:

Name
Job title or role
Business name and address
Email address
Telephone number (if voluntarily provided)
Information relating to the services you request

As part of our HR consultancy services, we may also receive personal data and special category data relating to employees or workers. Where this occurs, the information is provided to us by our client in connection with the services we are contracted to deliver. You confirm that you have obtained the appropriate authority and lawful basis to share this information with us.

3. Lawful basis for processing

We process personal data under one or more of the following lawful bases:

Contract, where processing is necessary to deliver services to you
Legal obligation, where we are required to retain information by law
Legitimate interests, where processing is necessary for business administration, service delivery, service improvement or communication, and does not override your rights
Consent, where you have explicitly agreed to receive marketing communications
Special category data is processed only where a lawful condition under UK GDPR applies, such as where processing is necessary for employment matters, legal claims or statutory obligations.

4. Controller and processor roles

In relation to personal data relating to our clients, EB People Consulting acts as a data controller.

In relation to employee or worker personal data provided by clients as part of HR consultancy services, EB People Consulting generally acts as a data processor and processes such data only in accordance with client instructions and contractual obligations.

5. How we use your information

We use personal data to:

Provide HR consultancy and advisory services
Communicate with you about enquiries or ongoing work
Liaise with authorised third parties on your behalf
Manage billing, administration and record keeping
Maintain internal reporting and business planning
Improve our services and comply with legal obligations

6. When we may contact you

We may contact you:

In response to enquiries or service-related correspondence
In relation to invoicing, contracts or service delivery
To request feedback or testimonials
To share updates on employment law or our services, where consent has been given

7. Marketing communications

We will only send marketing communications where you have actively opted in to receive them.

You can withdraw your consent at any time by using an unsubscribe link in our emails or by emailing emma@ebpeople.com.

8. Sharing your personal data

We do not sell your data.

We may share your personal data with trusted third parties only where necessary for service delivery or compliance with legal obligations. This may include legal advisers, IT service providers, health and safety advisers, professional bodies, regulators or government authorities.

All third parties are required to process personal data only on our instructions and to keep that data secure and confidential.

9. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

In most cases, client data is retained for up to seven years from the last interaction, unless a longer or shorter retention period is required by law or justified by a legitimate business need.

10. Your data protection rights

Under UK GDPR, you have the right to:

Access your personal data
Request correction of inaccurate or incomplete data
Request erasure of your data, subject to legal requirements
Restrict or object to processing
Request data portability
Withdraw consent at any time where processing is based on consent

Requests should be made in writing. We may need to verify your identity before responding.

11. Cookies and website analytics

Our website uses cookies to improve functionality and analyse website usage. This may include the use of Google Analytics.

Cookies may collect information such as anonymised IP addresses, browser type, pages visited and time spent on the website. No personally identifiable information is used to identify individual visitors.

You can manage or disable cookies through your browser settings.

12. Data security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

While no system can be completely secure, we regularly review and update our security measures.

13. International data transfers

Personal data is stored within the United Kingdom and the European Economic Area. We do not transfer data outside these areas unless appropriate safeguards are in place and required by law.

Where we work with clients based in the Republic of Ireland, personal data may be transferred within the European Economic Area in accordance with UK GDPR requirements.

14. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Any material changes will be posted on our website. We recommend reviewing this notice periodically to remain informed.

15. Contact details

If you have any questions about this Privacy Notice or wish to exercise your data protection rights, please contact:

Emma Bleeks
EB People Consulting
Email: emma@ebpeople.com

Last updated: 15th April 2026