1. Who we are
Mabelhr Ltd, trading as Mabel HR, is the controller of personal information described in this notice unless we tell you otherwise. Mabelhr Ltd is registered in England and Wales under company number 08171703. Our registered office is 2 Tower House, Tower Centre, Hoddesdon, Hertfordshire, EN11 8UR, and our VAT number is 520 1481 38.
Our privacy contact is Sharon Gormill. Privacy enquiries and rights requests can be sent to hello@mabelhr.com or made by telephone on 0203 411 1903.
When we process employee, candidate or workforce information solely on a client’s documented instructions, the client may be the controller and Mabel HR may act as its processor. In that situation, the client’s privacy notice will normally explain the processing.
2. Information we collect
Depending on how you interact with us, we may collect:
- contact and identity information, such as your name, work email address, telephone number, job title and organisation;
- enquiry information, including company headcount, messages, requested services and communications with us;
- client and supplier information, including professional contact details, contracts, instructions, billing and payment records;
- website and device information, such as IP address, browser type, device information, page interactions, referral source and security logs where these are generated by our hosting or technical providers;
- event, meeting and marketing information, including preferences and engagement with communications;
- recruitment information if you apply to work with us, such as employment history, qualifications and application materials; and
- workforce information supplied for client services, which may include employee, worker, contractor or candidate information and, where necessary, special category information.
Please do not send special category information, criminal-offence data or highly confidential personal information through the general Website contact form unless we have asked you to do so and agreed a secure method.
3. Where information comes from
We collect information directly from you, from your organisation, from clients who instruct us, from public professional sources, from service providers and from your interaction with the Website and our communications.
4. How and why we use information
We use personal information to:
- respond to enquiries and arrange introductory calls;
- prepare proposals, enter into and manage business relationships;
- deliver HR, payroll, workforce, global hiring, technology and AI-related consultancy services;
- manage billing, suppliers, administration, records and business operations;
- protect our systems, prevent misuse and maintain Website security;
- improve our services, processes and Website;
- send relevant business communications where permitted, and respect opt-out choices;
- recruit and manage people who work with us; and
- comply with legal, regulatory, insurance, audit and professional obligations.
Lawful bases
Our lawful bases may include taking steps at your request before entering a contract, performing a contract, complying with a legal obligation, pursuing legitimate interests, and consent where required. Legitimate interests can include responding to business enquiries, operating and improving our consultancy, maintaining relationships, ensuring security and communicating about relevant services.
Where we process special category information, we also identify an additional legal condition, such as employment and social protection law, legal claims, substantial public interest or explicit consent, depending on the circumstances.
5. Contact forms and Google services
When you submit the Website contact form, the information entered is transmitted to a Google Apps Script endpoint and may be stored in Google Sheets so that we can receive, manage and respond to your enquiry. This may include your name, work email, company, headcount, message, submission time and a technical submission identifier.
The Website also uses Google services for analytics and may use Google Ads, as explained in section 6 below. We keep contact-form content separate from Analytics tracking and do not intentionally send names, email addresses or message contents to Google Analytics.
Google and other service providers may process limited technical data to provide their services. Their own privacy terms also apply to their independent processing.
8. International transfers
Some providers or delivery partners may process information outside the United Kingdom. Where UK data protection law requires it, we use an approved transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or another lawful safeguard.
9. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose collected, including legal, regulatory, tax, accounting, insurance and dispute requirements.
As a general guide, routine enquiries that do not become client relationships may be kept for up to 24 months; client, supplier and financial records are commonly retained for up to seven years after the relationship ends; and marketing records are retained until you opt out or the information is no longer relevant. Different periods may apply where law, a client instruction, a legal claim or the sensitivity of the information requires it.
10. Security
We use proportionate technical and organisational measures designed to protect information from accidental or unlawful destruction, loss, alteration, disclosure or access. Measures may include access controls, authentication, secure systems, confidentiality obligations, supplier checks, backups and staff guidance.
No internet or storage system can be guaranteed completely secure. Please contact us promptly if you believe information connected with Mabel HR has been compromised.
11. Your rights
Depending on the circumstances and lawful basis, you may have rights to:
- request access to your personal information;
- ask us to correct inaccurate or incomplete information;
- request deletion or restriction of processing;
- object to processing based on legitimate interests or to direct marketing;
- receive certain information in a portable format;
- withdraw consent at any time where processing relies on consent; and
- ask for safeguards relating to certain solely automated decisions.
You have an absolute right to object to direct marketing. To exercise a right, email hello@mabelhr.com. We may need to verify your identity and may not be able to fulfil a request where an exemption applies.
12. Complaints
Please contact us first so we can try to resolve any concern. You also have the right to complain to the UK Information Commissioner’s Office (ICO). The ICO’s website provides current contact and complaint information.
13. Changes to this notice
We review this notice and may update it when our services, technology or legal obligations change. Material changes will be highlighted where appropriate. The current version is identified by the date shown above.