Privacy Policy

Effective Date: 01/07/2026

Lansbury Management Services is committed to protecting the privacy and security of the personal data we process. This Privacy Policy sets out how we collect, use, and protect the personal data of our website visitors, job applicants, potential candidates, business contacts and prospective business clients, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

Lansbury Management Services acts as the Data Controller for the data processed under this policy. This means we determine the purposes and means of processing that personal data.

Company Name: Lansbury Management Services Ltd

Address: Swadlincote, Derbyshire, UK (specific address withheld for online publishing; provided on request)

Email: admin@lansburyhr.co.uk

Telephone: 01283 373687

ICO registration number: ZA688886

2. The Personal Data We Collect

We collect and process various types of personal data depending on your relationship with us, for example as a candidate, client, business contact or prospective business client.

Identity Data

Name, title, date of birth, gender, photograph. Source: candidate, client, or public sources such as LinkedIn.

Contact Data

Home or work address, email address, telephone numbers. Source: candidate, client, or public sources.

Professional Data (candidates)

CV or resume, employment history, education details, salary expectations, professional qualifications, interview notes, reference checks. Source: the candidate directly, or third party job boards and recruiters.

Business Contact Data (prospective business clients)

The business name, business contact details such as a business email address and telephone number, the name and job role of a business contact where relevant, and publicly listed company information. Source: publicly available business sources, such as the business rates list, Companies House, company websites and LinkedIn company pages.

3. How and Why We Use Your Data (Purposes and Lawful Basis)

We rely on specific legal bases under the UK GDPR to process your personal data.

To provide HR consultancy and training services to clients. Lawful basis: Contractual Necessity. Data involved: Client and business data.

To match candidates with job opportunities. Lawful basis: Legitimate Interest (operating a commercial HR and recruitment business and finding suitable employment for candidates). Data involved: Identity, Contact and Professional data.

To market our services to prospective business clients. Lawful basis: Legitimate Interest (growing our client base by making local businesses that are likely to need HR support aware of our services; we have assessed this and concluded it does not override the rights of the individuals concerned). Data involved: Business Contact data.

To manage contracts and invoices. Lawful basis: Legal Obligation (tax and accounting) and Contractual Necessity. Data involved: Client and business data, Financial data.

To respond to enquiries. Lawful basis: Legitimate Interest (responding to communications). Data involved: Identity and Contact data.

To monitor website performance. Lawful basis: Legitimate Interest (improving our service and the user experience). Data involved: Technical data.

To monitor campaign analytics. Lawful basis: Legitimate Interest (improving our service and the user experience). Data involved: Technical data.

For diversity and equality monitoring. Lawful basis: Explicit Consent or Legal Obligation (where legally mandated). Data involved: Special Category data.

Our outreach to prospective business clients goes only to businesses (such as limited companies, LLPs and public bodies), it always identifies us clearly, and it always gives you a simple way to opt out. You can ask us to stop at any time, and we explain how in Section 7.

4. How We Share Your Data

We will only share your personal data when strictly necessary and with appropriate safeguards in place.

Our Clients (Employers): If you are a candidate, we share your Professional Data, such as your CV and cover letter, with prospective employers (our clients) only with your prior knowledge and agreement to the specific roles.

Service Providers: We use third party providers for essential services such as IT support, web hosting, email hosting, our customer relationship management (CRM) and email marketing platforms, and professional payroll and accounting. These third parties act as Data Processors and only process your data on our instructions and under strict confidentiality agreements.

Legal and Regulatory Authorities: We will disclose data where we are legally required to do so, such as to HMRC, the ICO, or in response to a court order.

5. International Data Transfers

Lansbury Management Services primarily stores and processes personal data within the UK or the European Economic Area (EEA).

If we transfer data outside the UK or EEA, for example where a client or system provider is based outside these areas, we ensure a high level of protection is afforded to the data by implementing appropriate safeguards, such as:

Transferring data to countries deemed adequate by the UK Government.

Using UK International Data Transfer Agreements or Addendums.

6. Data Security and Retention

Data Security

We have implemented appropriate security measures, including physical, technical, and organisational steps, to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorised way. We limit access to your personal data to employees, agents, contractors, and third parties on a strict need to know basis.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our typical retention periods include:

Unsuccessful candidate records: 6 to 12 months from the end of the recruitment process, to respond to potential legal claims or if a similar role arises. After this period, data is securely deleted or anonymised.

Successful candidate records: retained as per client contract terms, typically for a minimum of 6 years after placement, to comply with legal, tax, and insurance requirements.

Client and contract records: 6 years from the termination of the contract, to satisfy statutory and accounting requirements such as HMRC.

General enquiries and website data: up to 12 months after the enquiry is closed, to manage business operations and resolve disputes.

Prospective business client and marketing data: we review this data periodically and delete it once there is no longer a live interest in contacting the business. This period is set for 12 months.

7. Your Legal Rights

Under the UK GDPR, you have the following rights concerning your personal data:

The Right to Be Informed: to be informed about how your personal data is being used, which is the purpose of this Privacy Policy.

The Right of Access: to request a copy of the data we hold about you, commonly known as a Subject Access Request.

The Right to Rectification: to request that we correct inaccurate or incomplete data about you.

The Right to Erasure (Right to Be Forgotten): to request that we delete or remove your personal data where there is no compelling reason for us to continue processing it.

The Right to Restrict Processing: to block or suppress the processing of your personal data in certain circumstances.

The Right to Data Portability: to obtain and reuse your personal data for your own purposes across different services.

The Right to Object: to object to the processing of your data based on our legitimate interests, or for direct marketing purposes.

Rights in Relation to Automated Decision Making: rights concerning decisions made about you without human intervention. We do not currently use solely automated decision making.

To opt out of our marketing specifically, you can reply to any message we send you, or email admin@lansburyhr.co.uk, and we will stop straight away. To exercise any of your other rights, please contact us using the details in Section 1.

8. Changes to This Privacy Policy

This policy is regularly reviewed. We reserve the right to update this Privacy Policy at any time. The updated version will be posted on this website with a new Effective Date.

9. Complaints

You have the right to lodge a complaint with the supervisory authority in the UK, which is the Information Commissioner's Office (ICO), if you believe your data has been processed unlawfully.

Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number: 0303 123 1113

Website: www.ico.org.uk