top of page

Privacy & Cookie Policy

Last Updated: November 2026

Saltwater HR ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website (https://saltwaterhr.co.uk) or communicate with us, and outlines your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller Details

Saltwater HR is the data controller responsible for your personal data.

  • Company Name: Saltwater HR Limited (Company No: 16121905)

  • Registered Address: 49 Station Road, Polegate, East Sussex, BN26 6EA

  • Email Address: info@saltwaterhr.co.uk

  • Phone: 07442 993534

2. Personal Data We Collect

We collect and process personal data depending on how you interact with our website and services:

  • Identity & Contact Data: Your name, email address, telephone number, business name, and role title provided when you complete our enquiry form, schedule a consultation, or contact us directly.

  • Technical & Usage Data: IP address, browser type, operating system, pages visited, time spent on pages, referral source, and device information automatically collected when you browse our website.

  • Marketing & Communications Data: Your preferences in receiving updates, newsletters, or downloadable resources from us.

We do not intentionally collect any Special Category Personal Data (such as health, political, or religious information) via our website.

3. How We Collect Your Data

  • Direct Interactions: You give us your data directly by filling in contact forms, booking a call using an online calendar link, emailing us, or signing up for updates.

  • Automated Technologies: As you interact with our site, we automatically collect technical data using cookies, server logs, and analytics software.

4. Lawful Bases for Processing Your Data

We only process personal data when the law allows us to. Under the UK GDPR, we rely on the following legal bases:

  • Legitimate Interests: To respond to business enquiries, manage client administrative requests, improve our website functionality, and prevent website abuse.

  • Contractual Obligations: To take necessary steps prior to entering into a contract with your business, or to fulfill our contractual obligations once engaged.

  • Legal Obligation: To comply with legal requirements, tax rules, or regulatory obligations in the UK.

  • Consent: Where you have explicitly opted in to receive marketing communications or downloadable resources from us. You may withdraw consent at any time.

5. Third-Party Data Processors

We share your data only with trusted third-party service providers essential for operating our website and providing remote HR services. These providers act as data processors and are bound by strict confidentiality and data protection obligations:

  • Website Hosting & Infrastructure: Web hosts and content management providers.

  • Communication & Scheduling: Email service providers and calendar scheduling tools (such as Calendly).

  • Analytics Providers: Google Analytics (to evaluate site performance and user experience).

  • Professional Systems: Secure cloud storage systems used for administrative and client file management.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

6. International Data Transfers

Where third-party service providers store or process data outside the UK (for example, cloud servers hosted in Canada or the US), we ensure appropriate safeguards are in place. These include transferring data under the UK International Data Transfer Agreement (IDTA), standard contractual clauses, or to countries recognised by the UK government as offering an adequate level of protection.

7. Data Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

  • General Enquiries: Retained for up to 12 months after the query is resolved, unless you become a client.

  • Client Records: Retained for 6 years following the end of the client relationship, in accordance with UK statutory accounting, legal, and tax obligations.

  • Marketing Subscribers: Retained until you unsubscribe or withdraw consent.

8. Data Security

We have put in place appropriate physical, technical, and organizational measures to prevent your personal data from being accidentally lost, accessed, altered, or disclosed in an unauthorized way. Access to your personal data is restricted to authorized personnel who have a business need to know.

9. Your Legal Rights (UK GDPR)

Under UK data protection law, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Request correction of inaccurate or incomplete personal data.

  • Right to Erasure: Request the deletion of your personal data where there is no legal reason for us to keep processing it.

  • Right to Object: Object to processing based on legitimate interests or for direct marketing.

  • Right to Restrict Processing: Request the suspension of data processing under certain scenarios.

  • Right to Data Portability: Request the transfer of your data to you or a third party in a structured, commonly used format.

To exercise any of these rights, please email info@saltwaterhr.co.uk.

10. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to distinguish you from other users, optimize performance, and analyze site traffic.

  • Essential Cookies: Necessary for the operation of the website, enabling security and core functions.

  • Analytics Cookies: Allow us to recognise visitors, count traffic, and analyze how visitors navigate our site.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable cookies, some parts of this website may become inaccessible or function incorrectly.

11. Complaints to the Information Commissioner's Office (ICO)

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

We would, however, appreciate the chance to address any concerns directly with you before you contact the ICO, so please reach out to us in the first instance.

bottom of page