Privacy notice for Practical Change Partners Limited

About Us

• At Practical Change Partners Limited (“we” or “us”) your privacy is important to us.

• You entrust us with sensitive people information and we take that responsibility seriously.

• Our Privacy Policy complies with General Data Protection Regulation (GDPR).

• If you have any queries regarding GDPR or our Privacy Policy then please contact us at claire@practicalchangepartners.com

Data Collection

• When you use our services, we occasionally need to use employee personal data in the review and design of people solutions.
  This might include:
  - Identity Data: full name, date of birth, gender, position title
  - Contact Data: email address, telephone number, office location
  - Financial Data: employment history (dates, remuneration)

• Should we need to access personal data, we’ll only process it:
  - To complete an existing engagement with you
  - In accordance with a legal obligation
  - Where we have your consent.

• We collect the data via the interactions we have with you and information you provide to us

Data Usage and Storage

• If we collect personal employee data we will only use it in relation to our engagement

• Occasionally we engage service providers who perform elements of our service on our behalf. Should they need to use personal employee data we will first seek your permission and wherever possible will annonomise the data.

• Service providers may include suppliers and sub-contractors who provide, for example, survey technology, IT services such as hosting for our servers. They will only process personal employee data on our instructions and they are subject to duty of confidentiality.

Data Retention

• The length of time we will retain employee personal data depends on what it is and whether we have an ongoing business need to do so.
  - Where we have an ongoing engagement with a client data be maintained for seven years, after this the information and documentation will be deleted/shredded unless instructed otherwise by the client.
  - After disengagement we hold client data for one year, it is the client’s responsibility to ensure they have all the necessary historical information and documentation for themselves and their business(s) at disengagement.
  - Details of prospective clients are held for a maximum of one year and then removed from our systems.

• Where we have given you (or where you have chosen) a password which enables you to access certain systems, we recommend you update your password as soon as we have communicated it to you. You are responsible for keeping this password confidential. We ask you not to share a password with anyone.

• Employees of our clients have the right to access any of the information held about them by emailing claire@practicalchangepartners.com.

• Employees of our clients have the right to request that data about them is deleted. If they request for data to be deleted while we have an active engagement in place, this may prevent us from being able to complete our engagement and therefore will result in disengagement of our services.

• Should you wish to make any comments regarding this Privacy Notice please contact claire@practicalchangepartners.com