Privacy Policy
Last updated August 2026
Introduction
Neon Pepper HR Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you visit our website or engage with our services.
We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.
Contact Us
If you have any questions about this policy or how we handle your data, you can reach us at: Email us at Enquiries@neonepperhr.com
What Data We Collect
We collect a few different kinds of personal data, depending on how you interact with us. If you get in touch via our website or by email, we'll have your contact details, such as your name, email address, phone number, and company name, along with the content of whatever you send us. If you visit our website, cookies and analytics tools automatically collect some usage data, such as which pages you visit, how long you spend on the site, your browser type, and your approximate location. And if you book a call with us through Google Meet or Microsoft Teams, we'll have your name, email address, and whatever information comes up during that conversation.
We don't knowingly collect sensitive personal data, such as details about health or religion, unless you choose to share it with us as part of an enquiry.
How We Use Your Data
We use your data to respond to enquiries, manage our relationship with you as a prospective or current client (including through our CRM, HubSpot), and send marketing communications where you've agreed to receive them. We also use website usage data to understand how visitors engage with our site so we can improve it, and we process data more generally as needed to meet our legal and regulatory obligations.
Our Lawful Basis for Processing
Under UK GDPR, we rely on a few different lawful bases depending on the activity. We rely on your consent for marketing emails and non-essential cookies, on legitimate interests for responding to enquiries and improving our website (where doing so doesn't override your rights), and on contract where processing is necessary to deliver services you've engaged us for. You can withdraw consent at any time, see Section 7 for how.
Tools and Third Parties we use
Running our website and business involves a small number of third-party tools. Squarespace hosts our website and may set essential cookies for it to function properly, and Google Analytics helps us understand how visitors use the site, collecting anonymised or pseudonymised usage data. Neither of these is optional if you want to browse the site itself.
We also use HubSpot as our internal CRM and for email marketing. It isn't integrated with our website, when you contact us, we manually record your details in HubSpot rather than it capturing anything automatically. For consultations, we currently use Google Meet, though we're in the process of moving to Microsoft Teams.
Some of these providers, including Google and HubSpot, are based in the US. Where that's the case, they operate under approved safeguards such as Standard Contractual Clauses (SCCs) to keep your data protected. We don't sell your personal data to third parties.
Cookies
Our website uses cookies for two purposes: enabling core site functionality, and understanding site usage through Google Analytics. You can manage or withdraw your cookie consent at any time using the cookie banner on our website, or through your browser settings.
How long we keep your data
How long we keep your data depends on what it is. Enquiry data is kept for up to 12 months if no ongoing engagement develops, after which it's deleted. Client data is kept for the duration of our engagement and for a period afterwards as required for legal, accounting, or tax purposes; typically six years. Marketing data is kept until you unsubscribe or withdraw consent, and analytics data follows Google Analytics' standard retention settings.
Your Rights
Under UK GDPR, you have the right to access the personal data we hold about you, request correction of anything inaccurate, and request deletion of your data (the "right to be forgotten"). You can also object to or restrict certain processing, request a copy of your data in a portable format, and withdraw consent at any time, though this won't affect any processing already carried out before you withdraw it.
To exercise any of these rights, contact us at enquiries@neonpepperhr.com . You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at [ico.org.uk](https://ico.org.uk) if you believe your data has been mishandled.
Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including relying on the security measures of our trusted third-party providers; Squarespace, Google, and HubSpot.
Changes to this policy
We may update this policy from time to time, and the "last updated" date at the top will reflect the most recent changes. We'd encourage you to check back periodically.