Privacy Notice
Last updated: June 2026
1. Who we are
The Ordinary HRD Ltd ("we", "us", "our") is an HR consultancy providing people risk advisory services. We are the data controller for personal data collected through this website and in the course of providing our services.
If you have any questions about this notice or how we handle your data, contact us at: privacy@theordinaryhrd.co.uk
2. What personal data we collect
We may collect and process the following categories of personal data:
- From website enquiries and contact forms: your name, work email address, job title, organisation name, and the content of your message.
- From client engagements: details necessary to deliver our services, which may include personal data about employees or third parties relevant to a case.
- From website usage: technical data such as IP address, browser type, and pages visited, collected via cookies and analytics tools.
3. How we use your data
We use personal data for the following purposes:
- To respond to enquiries and communicate with prospective clients.
- To deliver HR consultancy services under a contract or letter of engagement.
- To comply with our legal and professional obligations.
- To maintain records of our work for quality assurance and legal purposes.
- To improve our website and services.
4. Our lawful bases
We rely on the following lawful bases under UK GDPR:
- Contract: where processing is necessary to perform a contract with you or take steps prior to entering one.
- Legitimate interests: for responding to enquiries, maintaining business records, and improving our services.
- Legal obligation: where we are required to process data to comply with the law.
- Consent: where we have explicitly asked for and received your consent.
Where we handle special category data in the course of a client engagement, we rely on the processing being necessary for the purposes of employment law obligations or for the establishment, exercise, or defence of legal claims.
5. Who we share data with
We do not sell personal data. We may share data with:
- Our professional advisers, including legal counsel and accountants.
- IT service providers who support our business operations.
- Regulatory bodies or law enforcement where required by law.
In client engagements, data is shared only to the extent necessary to deliver the agreed scope of work, and in accordance with any confidentiality provisions in our engagement letter.
6. How long we keep data
We retain personal data only for as long as necessary:
- Enquiry data with no subsequent engagement: up to 12 months.
- Client engagement records: 7 years from the end of the engagement.
- Website analytics data: up to 26 months.
7. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request erasure of your data, subject to our legal obligations.
- Object to or restrict certain processing.
- Data portability in certain circumstances.
- Withdraw consent at any time, where consent is the basis for processing.
To exercise any of these rights, contact us at privacy@theordinaryhrd.co.uk. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8. Cookies
Our website uses essential cookies to function correctly, and analytics cookies to understand how visitors use the site. You can manage cookie preferences via the cookie banner when you first visit the site.
9. Changes to this notice
We may update this privacy notice from time to time. The current version will always be available on this page, with the date of the last update shown at the top.