This Privacy Policy explains how Delgado HR collects, uses, and protects your personal data in accordance with the UK GDPR and the Data Protection Act 2018. It outlines your rights and how we look after your information when you visit our website or use our services. 

1. WHO WE ARE

Delgado HR (“we”, “us”, “our”) is a HR consultancy business operating in the United Kingdom. 

Delgado HR is registered with the Information Commissioner’s Office (ICO) as a data controller and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

Contact Email: info@delgadohr.co.uk 
Business Address: 32B Newtown Road, Newry, United Kingdom, BT34 3BZ. 

2. PERSONAL DATA WE COLLECT

We may collect and process the following types of data: 

•  Contact details (name, email address, phone number). 

• Information submitted through forms or enquiries. 

• Client information required to deliver our HR services. 

• Usage data (IP address, browser type, pages visited). 

• Cookies and tracking data (see Cookie Policy). 

We do not collect sensitive data unless necessary for a specific service and always with your explicit consent. 

3. HOW WE USE YOUR DATA

We use your personal data to: 

• Respond to enquiries and provide our services. 

• Manage client relationships and communications. 

• Comply with legal and regulatory obligations. 

• Improve our website and user experience. 

• Maintain business records and security. 

We process your data only where we have a lawful basis, such as consent, legitimate interest or contractual necessity. 

4. LAWFUL BASES FOR PROCESSING

We may process your data under the following bases: 

• Contract: when needed to deliver our services. 

• Legitimate Interests: improving services, internal administration, preventing misuse. 

• Compliance with Legal Obligations: HR documentation, record keeping. 

• Consent: when you voluntarily provide information or accept cookies. 

 5. SHARING YOUR DATA

We may share data with trusted third parties, such as: 

• Service providers (IT, email hosting, analytics). 

• Professional advisors (legal or regulatory). 

• Authorities where legally required 

We never sell your data. All third parties are required to keep your information secure and compliant with UK GDPR. 

6. DATA STORAGE AND RETENTION

We store your data securely and retain it only for as long as necessary for the purposes described in this policy or to comply with legal obligations. Retention periods may vary depending on the nature of the information. 

7. YOUR RIGHTS UNDER UK GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data: 

• Right of Access (Subject Access Request): You have the right to request a copy of the personal data we hold about you.  

• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.  

• Right to Erasure (‘Right to be Forgotten’): You have the right to request that we delete your personal data under certain conditions.  

• Right to Restriction of Processing: You have the right to request that we limit how we process your data.  

• Right to Data Portability: You have the right to request that we transfer your data to another organisation or directly to you in a structured, commonly used format.  

• Right to Object: You have the right to object to our processing of your personal data, including processing based on legitimate interests or for direct marketing.  

• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you. 

If you wish to exercise any of these rights, please contact us at info@delgadohr.co.uk. We will respond to your request within one calendar month of receipt.  

8. THE COMPLAINT PROCESS 

We accept complaints made through any channel, regardless of whether the specific term “GDPR” or “Data Protection” is used. If we receive a complaint via social media or other informal channels, we will direct it to our formal process. 

Once a complaint is received, we will follow these steps: 

Stage 1: Acknowledgement (Legal requirement is 30 days) 

• We will acknowledge receipt of the complaint within 5 days. (Note: For electronic submissions, an automated acknowledgment email is sufficient). 

Stage 2: Investigation (Without Undue Delay) 

• We will investigate the matter promptly. This involves: 

• Reviewing the details provided. 

• Determining if an infringement occurred. 

• Gathering relevant internal evidence. 

• We will keep the complainant updated on our progress during the investigation. 

Stage 3: Outcome and Resolution 

• We will provide the complainant with a final outcome without undue delay. 

• Our response will include: 

• A summary of our findings. 

• An explanation of the reasoning behind our decision. 

• Details of any actions taken (or planned) to resolve the issue. 

• Notification of the individual’s right to escalate their concern to the Information Commissioner’s Office (ICO). 

9. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access or disclosure. 

10. UPDATES TO THIS PRIVACY POLICY

We regularly review this policy to reflect legislative updates, structural operational changes, or new regulatory guidance. Any amendments will be published on this page with a revised effective date.  Last Updated: July 2026. 

11. WHO TO CONTACT

For questions about this Privacy Policy or to exercise your rights, please contact: info@delgadohr.co.uk