Privacy Policy

Last updated: October 2025 

High Performing HR Ltd. (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website [www.highperforminghr.com] (“Site”), contact us, or engage with our services.

Who we are

High Performing HR Ltd.
Company Number:  14281397
Registered Office: Bedford

We are the data controller responsible for your personal data collected via this Site.

What and how

How we collect your data

We may collect your personal data in a few different ways:

• Directly from you: when you fill out forms, send us emails, call us, or talk to us      in person.
• From your organisation: if we’re working with your company, they might provide      us with your details.
• From public sources: we might gather information that is publicly available.
• From our service providers: if other companies process data on our behalf, they      may pass it to us.

What info do we collect?

We might collect and process the following personal details:

• Name
• Date of birth
• Address
• Email address
• Phone number
• Job title
• IP address
• Employer/organisation details
• Associations or affiliations
• Any other information you choose to give us while using our services.

In some cases, we might also process sensitive data (called “special category data”) if it’s relevant to our work.

How and why we use your data

Purpose of processing | Legal reason (UK GDPR) | Our legitimate interest

• To  contact you: Legitimate interests – Article 6(1)(f)
• Responding      to your questions and providing you with relevant information: (same)
• To  send you information about our services: Consent – Article 6(1)(a) (non-clients); Legitimate interests – Article 6(1)(f) (existing clients)
• Growing our business by keeping existing clients informed about services that might interest them: (same)
• To provide our services to you: Contractual necessity – Article 6(1)(b)
• To  take payments from you: Contractual necessity – Article 6(1)(b); Legal  obligation – Article 6(1)(c)
• To  send you articles and blogs: Consent – Article 6(1)(a) (non-clients);  Legitimate interests – Article 6(1)(f) (existing clients)
• Staying connected with clients and sharing useful resources: (same)
• To receive information from your organisation to provide services: Contractual necessity – Article 6(1)(b)
• To  collect information from open sources to deliver services: Legitimate interests – Article 6(1)(f)
• To share information with your organisation, law enforcement, or third-party  providers: Legal obligation – Article 6(1)(c) (law enforcement); Contractual necessity – Article 6(1)(b) or Legitimate interests – Article 6(1)(f) (service delivery)

Automated decision-making
We don’t use your personal data to make any decisions about you automatically, such as profiling, that would have a legal or other significant effect on you.

Third-Party Processors

Sometimes we need to share your data with other trusted companies to help us run our business. These might include:

• Email and marketing platforms
• Payment processors
• Companies hosting our IT systems
• Your employing organisation
• Productivity platforms
• Law enforcement or other regulatory bodies (if we are legally required to)

International Transfers

Some of our service providers and our associates are based outside of the UK, so your data might be transferred there. When this happens:

• We rely on special legal agreements (like Standard Contractual Clauses or      International Data Transfer Agreements) to ensure your data is still protected, no matter where in the world it travels.
• If a country has a specific "adequacy decision" (meaning the UK has deemed their data protection laws to be good enough), we can rely on that decision. If you’d like to see a copy of these safeguards, just ask by emailing us at siobhan@highperforminghr.com.

Special Category Data

In our work, we occasionally need to process highly sensitive data, such as:

• Racial or ethnic origin
• Political opinions
• Religious  or philosophical beliefs
• Trade union membership
• Health data
• Sexual orientation

The legal reason we can collect this type of information is typically with your explicit consent or if we have a legal obligation to do so (Article 6, UK GDPR). We also have specific conditions under Article 9 UK GDPR that allow us to process this data, such as your explicit consent or substantial public interest (if authorised by law). Because this data is so sensitive, we take extra care. This includes:

• Data minimisation: we only collect what’s absolutely necessary.
• Access controls: only people who need to see the data can access it.
• Pseudonymisation: we try to remove direct identifiers where we can.

When we rely on UK law-based conditions (Schedule 1 of the Data Protection Act 2018), we also keep a specific document called an “Appropriate Policy Document” to explain how we meet our obligations.

We also conduct a “Data Protection Impact Assessment” (DPIA) when processing this type of data, as it is considered high-risk.

We will never upload your special category data to third-party marketing platforms unless we have your explicit consent and all the necessary contractual safeguards.

Your Rights

You have several important rights regarding your personal information:

• Access  your data: get a copy of the personal information we hold about you.
• Limit  your data: ask us to restrict the processing of your data in certain  situations.
• Correct  your data: ask us to fix any information that you think is wrong or incomplete.
• Object  to us using your data: object to us processing your data in certain situations.
• Delete  your data: ask us to erase your personal information in certain situations.
• Transfer  your data: ask us to transfer the information you gave us to another      organisation, or to you, in certain situations.

You won’t have to pay to exercise these rights, and we have one month to respond to your request.

How Long we Keep Your Data

We hold on to your personal data for up to 7 years from our last contact with you, unless we’re legally required to keep it for longer. Just so you know, our third-party processors may have their own backup and deletion schedules that might apply as well. If you want to find out more about this, please contact us at: siobhan@highperforminghr.com.

Consent and Withdrawal

If we’ve asked for your consent to do something with your data, you’re free to change your mind at any time.
You can withdraw your consent by:

1. Clicking the “unsubscribe” link in any of our marketing emails.
2. Sending an email to siobhan@highperforminghr.com.

How to Complain

If you have any worries or a complaint about how we’re handling your data, please get in touch with us first at: siobhan@highperforminghr.com or via the form on our website.
You can also always complain directly to the UK’s supervisory authority:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
0303 123 1113 | www.ico.org.uk
 

You can manage cookie preferences via your browser settings .

For more details, see our full [Cookie Policy].

Changes to this policy

We may update this Privacy Policy occasionally to reflect changes in legislation or our services. Please check this page regularly. The latest version is always dated at the top.