Privacy Policy
17 Sept 2026
1. Who we are
This privacy policy explains how Trinity People Partners ("we", "us", "our") collects, uses and protects your personal data when you visit www.trinitypeoplepartners.org.uk (the "website").
We are the data controller for the personal data described in this policy.
Trading name: Trinity People Partners
Contact email: help@trinitypeoplepartners.org.uk
This website does not sell anything or take payments. It is an informational and enquiry-generating site for our HR and employee relations consultancy services.
This policy applies only to this website. It does not cover any third-party sites we link to, or how we handle personal data as part of delivering client HR/ER work under a signed client agreement (that is covered separately, by the terms of that engagement).
2. What personal data we collect
We collect personal data directly from you, and automatically through cookies and analytics.
Data you give us (enquiry/contact form):
Name
Email address
[Phone number — remove if not on the form]
[Company/organisation name — remove if not on the form]
The content of your message or enquiry
Data collected automatically (analytics and cookies):
IP address (usually anonymised/truncated by the analytics tool)
Browser type and device information
Pages visited, time on site, referring website
Approximate location (derived from IP address)
We do not knowingly collect any special category data (e.g. health, religion, ethnicity) through this website, and we ask that you do not include such information in enquiry messages unless it is directly relevant to the services you are asking about.
3. How and why we use your data
Under UK GDPR, we must have a lawful basis for each way we use your data.
Responding to your enquiry — Data used: name, email, phone, message. Legal basis: legitimate interests (running our business and answering enquiries you have chosen to send us).
Sending you information you've requested about our services — Data used: name, email. Legal basis: consent (given when you submit the form).
Understanding how visitors use our website — Data used: analytics/cookie data. Legal basis: consent (for non-essential analytics cookies).
Keeping records to meet legal, accounting or insurance obligations — Data used: enquiry records. Legal basis: legal obligation / legitimate interests.
We do not use your data for automated decision-making or profiling that has a legal or similarly significant effect on you.
4. Cookies and analytics
We use cookies and similar technologies to run the website and to understand how it's used.
Strictly necessary cookies — Purpose: makes the site function (e.g. remembering your cookie preferences). Consent required: no, always active.
Analytics cookies (e.g. [Google Analytics]) — Purpose: tells us how many people visit, which pages are popular, and how visitors found us. Consent required: yes.
When you first visit the website, a cookie banner — built into our website platform, Squarespace — lets you accept or reject non-essential cookies. This can stop Squarespace, and some connected third-party tools, from setting non-essential cookies until you accept them, though not every third-party script can be blocked this way. You can change your choice at any time via [the cookie settings link in the website footer]. Full details are in our separate Cookies Policy.
Squarespace Analytics (built into our website platform) and any additional analytics tool we add, such as [Google Analytics], process data on an aggregated, largely anonymised basis and are not used to identify you personally.
Most web browsers also let you block or delete cookies through their settings — see your browser's help pages for instructions.
5. Who we share your data with
We don't sell your personal data. We share it only with service providers who help us run the website and our business, under contracts that require them to protect it:
Website hosting: Squarespace, Inc.
Website analytics: Squarespace Analytics (built in), and [any additional analytics tool you add, e.g. Google Analytics]
Enquiry/email handling: [insert form or email provider, e.g. Squarespace's own contact form, Gmail]
[Any CRM or email marketing tool, if used — e.g. Mailchimp]
We may also disclose your data where required by law, for example to a regulator, court, or law enforcement body.
6. International transfers
Our website platform, Squarespace, is a US company, so some data (including cookie and analytics data) may be stored or processed outside the UK, including in the United States. The same applies to some of the other service providers listed above.
Where this happens, we rely on safeguards recognised under UK data protection law, such as the UK's international data transfer addendum or the receiving country holding an adequacy decision, to make sure your data is protected to a UK standard wherever it's processed.
7. How long we keep your data
We keep personal data only as long as we need it for the purpose it was collected for:
Enquiry form submissions that don't turn into a client relationship — retained for [e.g. 12 months from your last contact with us].
Enquiries that become a client engagement — retained for the duration of the engagement plus [e.g. 6 years], to meet our legal, accounting and insurance obligations.
Analytics data — retained for [e.g. 14–26 months, per your analytics tool's default retention setting].
After these periods, we delete or anonymise your data, unless we're required to keep it for longer by law.
8. Your rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you
Rectification of inaccurate or incomplete data
Erasure of your data ("the right to be forgotten"), in certain circumstances
Restrict how we use your data
Object to our use of your data, including for direct marketing
Data portability — receive your data in a portable format, where technically feasible
Withdraw consent at any time, where we rely on consent (e.g. analytics cookies, marketing emails), without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, contact us at [insert business contact email]. We'll respond within one month, as required by law.
9. How we keep your data secure
We use appropriate technical and organisational measures to protect your personal data, including [secure hosting, encrypted connections (HTTPS), restricted access to enquiry data, and regularly updated software]. No method of transmission over the internet is 100% secure, but we work to protect your data at every stage.
10. Children's data
This website is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us at [insert business contact email] and we will delete it.
11. Changes to this policy
We may update this policy from time to time, for example if we change how we use data or as the law changes. We'll post the updated version here with a new "last updated" date. Please check back periodically.
12. Contact us and complaints
If you have questions about this policy or how we handle your data, contact:
Trinity People Partners
Email: help@trinitypeoplepartners.org.uk
If you're unhappy with how we've handled your data, you have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
We'd appreciate the chance to address your concerns before you contact the ICO, but you're not required to come to us first.