Privacy Policy

Last updated: 03 July 2026

This privacy policy explains how WorkWiser Limited collects, uses and protects personal information.

For the purposes of data protection law, the data controller is:

Workwiser Limited
Trading as: Workwiser Limited
Company number:  16796579
Registered address: 37 Norwich Road, NR21 8AU
Email: enquiries@workwiserhr.co.uk
Website: www.workwiserhr.co.uk

We provide organisational transformation, People/HR advisory, diagnostic, interim, fractional leadership and consultancy services to organisations.

We are committed to protecting your privacy and handling personal information lawfully, fairly and transparently.

We may collect and use the following types of personal information:

Contact and identity information
Your name, job title, organisation, email address, telephone number and any other information you provide when you contact us.

Business enquiry information
Information about your organisation, the support you are looking for, your role, and any details you choose to provide through our website forms, emails, calls or meetings.

Client and project information
Where you become a client, we may process information needed to deliver our services, manage the relationship, issue proposals, agree contracts, provide advice, run diagnostics, produce reports and manage invoices.

Website and technical information
Information such as your IP address, browser type, device information, pages visited, time spent on the website, referral source and cookie preferences.

Marketing preferences
Information about whether you have opted in to receive updates, resources, invitations or marketing communications from us.

Special category information
We do not usually collect special category data through this website. However, because our work may involve People, HR, culture, organisational diagnostics, employee relations, investigations, wellbeing, equality, diversity or workforce matters, clients or individuals may sometimes provide information relating to health, disability, ethnicity, employment issues, grievances or other sensitive matters. Where this happens, we will only process that information where we have a lawful basis and an additional condition under data protection law.

We may collect information when you:

• complete a contact form on our website; 
• email, phone or message us; 
• book a call or meeting; 
• subscribe to updates, resources or events; 
• engage us to provide services; 
• interact with us on LinkedIn or other professional platforms; 
• visit our website and accept cookies or analytics technologies; 
• provide information to us as part of a client project. 

We may also receive information from clients, professional advisers, referral partners, public sources, or third-party platforms where this is relevant to a business enquiry or consultancy engagement.

We use personal information to:

• respond to enquiries; 
• understand what support you or your organisation may need; 
• arrange meetings and calls; 
• prepare proposals, contracts and statements of work; 
• deliver consultancy, diagnostic, advisory, interim, fractional or transformation services; 
• manage client relationships; 
• produce reports, recommendations and project outputs; 
• maintain appropriate business records; 
• issue invoices and manage payments; 
• comply with legal, tax, accounting and regulatory obligations; 
• improve our website, services and communications; 
• send relevant updates or marketing where permitted; 
• protect our legal rights and business interests. 

We will only use your personal information where we have a lawful basis. The lawful basis may vary depending on the context. The ICO confirms that privacy information should include the lawful basis relied upon, because this affects how personal information may be used and which rights apply. 

We may rely on:

Contract
Where processing is necessary to take steps before entering into a contract with you, or to deliver services under a contract.

Legitimate interests
Where processing is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include responding to business enquiries, managing client relationships, improving our services, keeping business records, and communicating with professional contacts.

Legal obligation
Where we need to process information to comply with legal, tax, accounting, regulatory or other statutory obligations.

Consent
Where you have given us consent, for example to receive certain marketing communications or to allow non-essential cookies. You can withdraw consent at any time.

Special category conditions
Where special category information is processed, we will rely on an appropriate condition under data protection law, such as explicit consent, employment/social protection obligations, legal claims, or substantial public interest grounds where applicable.

We may send you updates, insights, event invitations or resources where you have asked to receive them, where you are an existing client, or where we have a legitimate professional reason to contact you and the law allows us to do so.

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.

We will not sell your personal information to third parties.

Our website may use cookies and similar technologies to make the website work, understand how people use it, improve performance, and support marketing or analytics.

Cookies are small files placed on your device when you visit a website. Some cookies are strictly necessary for the website to function. Others, such as analytics or marketing cookies, should only be used where appropriate consent has been obtained. The ICO explains that cookie information must be clear and easily available, and that PECR applies alongside UK GDPR where cookies or similar technologies are used. 

We may use:

Strictly necessary cookies
Required for the website to operate.

Analytics cookies
Used to understand website traffic and improve user experience.

Functionality cookies
Used to remember preferences or improve the way the website works.

Marketing cookies
Used only where applicable and with appropriate consent.

You can manage cookies through our cookie banner or your browser settings.

We may share personal information with trusted third parties where necessary, including:

• website hosting providers; 
• email, calendar and cloud storage providers; 
• CRM, project management or document management systems; 
• accountants, bookkeepers and professional advisers; 
• legal advisers, insurers or auditors; 
• associate consultants or delivery partners working with us on client projects; 
• payment or invoicing providers; 
• regulators, public authorities or law enforcement where legally required. 

Where we work with associates or delivery partners, we will only share information needed for the relevant project or engagement. We expect all third parties to handle personal information securely and lawfully.

Some of our technology providers may store or process information outside the UK. Where this happens, we will take steps to ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses or other lawful transfer mechanisms.

We keep personal information only for as long as necessary for the purpose for which it was collected.

As a general guide:

• enquiry information may be kept for up to 24 months after the last meaningful contact; 
• client records may be kept for up to 7 years for legal, tax, accounting and professional record-keeping purposes; 
• marketing preference records may be kept until you unsubscribe or ask us to remove them; 
• website analytics information may be kept according to the settings of the relevant analytics provider; 
• project files may be retained for the duration of the engagement and then for a reasonable period afterwards in case of follow-up, audit, dispute or legal need. 

Where a client contract or data processing agreement specifies a different retention period, that agreement will apply.

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include secure cloud storage, access controls, password protection, limited access to project files, secure email practices, appropriate supplier due diligence and professional confidentiality controls.

Depending on the circumstances, you may have the right to:

• be informed about how your information is used; 
• access your personal information; 
• ask us to correct inaccurate information; 
• ask us to delete your information; 
• ask us to restrict how we use your information; 
• object to certain types of processing; 
• request transfer of your information; 
• withdraw consent where processing is based on consent; 
• complain to the Information Commissioner’s Office. 

To exercise your rights, contact us at:

[insert privacy contact email]

We may need to verify your identity before responding.

Please contact us first if you have concerns about how we use your personal information. We will do our best to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office, which is the UK regulator for data protection.

ICO website: ico.org.uk

Our website may include links to other websites, including LinkedIn or third-party platforms. We are not responsible for the privacy practices of those websites. You should read their privacy notices before providing personal information.

We may update this privacy policy from time to time. The latest version will be published on our website with the updated date shown at the top.