1. Who we are
Glass Human Resources (“we”, “us”, “our”) is a UK-based HR consultancy providing practical HR advice and support to businesses and their employees. We are the data controller for the personal data we process in connection with our business and services.
Contact details:
Email: hello@glasshumanresources.co.uk]
Registered office: 6 Charlecote Mews, Staple Gardens, Winchester, SO23 8SR, Hampshire
2. The personal data we collect
Depending on the nature of our relationship with you, we may collect and process:
- Identity data, such as name and job title
- Contact data, such as email address, telephone number and postal address
- Employment information, such as job role, employment history, salary, working hours and performance information
- HR-related information, such as holiday, sickness absence, disciplinary and grievance matters
- Other information provided to us in connection with HR advice or services
- Information provided through our website, including enquiry and contact forms
In some circumstances, we may process special category data, such as health information or information relating to equality and diversity, where this is necessary to provide HR advice and support and where permitted by applicable data protection law.
3. How we collect your data
We may collect personal data:
- Directly from you, including through forms, calls, meetings or emails.
- From your employer or organisation where we are providing HR services to them.
- Through our website enquiry or contact forms.
- From professional advisers or other third parties where appropriate and lawful.
- From publicly available sources, such as Companies House or professional websites.
4. How we use your personal data
We may use personal data to:
- Provide HR advice, consultancy and support services.
- Support employers with employment-related matters, including recruitment, performance, absence, disciplinary and grievance processes.
- Prepare HR documents, policies, contracts and other employment-related documentation.
- Respond to enquiries and communicate with clients and contacts.
- Manage our client relationships and provide ongoing support.
- Maintain appropriate business and service records.
- Meet our legal and regulatory obligations.
- Protect our business, clients and systems against fraud, misuse or other unlawful activity.
5. Lawful bases for processing
We process personal data in accordance with the UK GDPR and applicable data protection legislation. Depending on the circumstances, our lawful bases may include:
- Contract – where processing is necessary to provide our services or manage our contractual relationship with a client.
- Legitimate interests – where processing is necessary for the effective operation of our business and does not override your rights and interests.
- Legal obligation – where we are required to process information to comply with the law.
- Consent – where we have specifically asked for your consent and there is no other appropriate lawful basis.
Where we process special category data, we will also ensure that an appropriate additional condition under UK data protection law applies.
6. Sharing your data
We may share personal data where necessary and appropriate with:
- Our clients and their authorised representatives where we are providing HR services on their behalf.
- Professional advisers, such as employment lawyers, accountants or other specialists, where appropriate.
- Our trusted technology and software providers, such as email, cloud storage, HR and CRM systems.
- Relevant authorities or organisations where we are legally required or permitted to do so.
We only share personal data where there is a lawful basis for doing so and where appropriate safeguards are in place.
We do not sell your personal data.
7. International transfers
Some of our service providers may process or store personal data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place in accordance with applicable data protection law.
8. Data retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, regulatory, accounting or reporting requirements.
The length of time we retain information will depend on the type of information and the nature of our relationship with you.
When personal data is no longer required, we will securely delete or anonymise it where appropriate.
9. Your rights
Under UK data protection law, you may have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal data in certain circumstances.
- Request restriction of processing in certain circumstances.
- Object to processing based on legitimate interests or for direct marketing.
- Request data portability where applicable.
- Withdraw consent where we rely on consent as our lawful basis.
Some rights are subject to exceptions and may not apply in every circumstance.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO) if you believe your personal data has been handled unlawfully.
10. How to contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:
[hello@glasshumanresources.co.uk](mailto:hello@glasshumanresources.co.uk)
