Last updated: 18 June 2026
The Horsey HR Lady Ltd is committed to protecting your privacy and handling your personal data with care and transparency. This policy explains how we collect, use, and protect your information when you use our website or services, and how we use cookies to enhance your experience.
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all other relevant legislation.
1. Who We Are
The Horsey HR Lady Ltd (HHRL) is a limited company registered in England and Wales, Company Number 12196378. We provide HR consultancy services to small and medium-sized businesses. When we refer to ‘we’, ‘us’ or ‘our’ in this policy, we mean The Horsey HR Lady Ltd.
Data Controller: Emma Smith, Director
Contact: emma@thehorseyhrlady.co.uk | thehorseyhrlady.co.uk
Emma Smith acts as Senior Responsible Individual for data protection purposes under the Data (Use and Access) Act 2025.
2. What Data We Collect
2.1 Information you give us
- Your name, job title, and employer name
- Email address and telephone number
- Details of your enquiry or the services you are interested in
- Communications and correspondence sent to us
2.2 Information we collect automatically
- IP address, browser type and version, operating system
- Pages visited, time on site, referring URL
- Cookie data — see Section 5 below
3. How We Use Your Information
| Purpose | Lawful Basis |
| Responding to your enquiries and providing our services | Contractual necessity / Legitimate interests |
| Sending marketing communications (with your consent) | Consent (PECR and UK GDPR) |
| Improving our website and services | Legitimate interests |
| Complying with legal and regulatory obligations | Legal obligation |
| Managing data protection complaints | Legal obligation (DUAA 2025) |
4. Your Rights
Under UK GDPR and the Data (Use and Access) Act 2025, you have the following rights:
- Right of access — to receive a copy of personal data we hold about you. We apply a reasonable and proportionate standard when responding to access requests.
- Right to rectification — to have inaccurate data corrected
- Right to erasure — to request deletion of your data in certain circumstances
- Right to restrict processing — to limit how we use your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests
- Right to lodge a complaint — with the ICO (ico.org.uk) at any time
To exercise any of these rights, contact us at emma@thehorseyhrlady.co.uk. We will respond within 30 days.performance of a contract, legal obligation, consent, or legitimate business interest.
5. Cookies
5.1 What are cookies?
Cookies are small text files placed on your device when you visit our website. We use Cookiebot as our Cookie Management Platform (CMP) to obtain and record your consent for non-essential cookies.
5.2 Cookie categories
| Category | Description | Consent Required? |
| Strictly Necessary | Essential for the website to function | No |
| Analytics | Help us understand how visitors use our site (e.g. Google Analytics, Microsoft Clarity) | Yes |
| Marketing | Used to track visitors across websites for advertising purposes | Yes |
| Preferences | Remember your settings and preferences | Yes |
Under the Data (Use and Access) Act 2025, three additional categories of cookie are exempt from consent requirements: privacy-preserving analytics, security/fraud-detection, and technical error-detection cookies. These are still disclosed in our full Cookie Policy.
5.3 Managing cookies
You can withdraw or change your consent at any time by clicking the ‘Cookie Settings’ link in the footer of our website, or by clearing cookies in your browser settings. Please note that disabling certain cookies may affect website functionality.
6. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected. Our full Data Retention Schedule is available on request. In summary:
Data protection complaints: 6 years from date of resolution
Client records: 7 years from end of engagement
Marketing contacts: until consent is withdrawn or 3 years of inactivity
Website enquiries: 2 years from date of enquiry
7. Sharing Your Information
We do not sell your personal data. We may share it with trusted third-party service providers who process data on our behalf, including:
- SuiteDash (CRM and client portal) — Data Processing Agreement in place
- Cookiebot / Usercentrics (cookie consent management)
- Google (Google Analytics)
- Microsoft (Microsoft Clarity, OneDrive)
- Canva (design tools — see note on international transfers)
We may also disclose data where required by law or to protect legal rights.
8. International Transfers
Some of our third-party providers are based outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions). We will update this section as our supplier arrangements change.
9. Complaints
If you have a concern about how we handle your personal data, please contact us first at emma@thehorseyhrlady.co.uk. We have a documented internal complaints procedure and will respond within 30 days.
You also have the right to complain to the ICO at any time: ico.org.uk | 0303 123 1113.
10. Changes to This Policy
We may update this policy from time to time. The current version and date are shown at the top of this document. Material changes will be communicated via our website.
| Version | Date | Summary of Changes |
| v1.0 | June 2025 | Initial version |
| v2.0 | June 2026 | Updated for DUAA 2025: SRI designation, DSAR reasonable/proportionate standard, PECR penalty reference, new cookie exemptions, complaints section |