Privacy Policy – Thornleigh

Thornleigh (“we”, “us”, or “our”) is committed to protecting your privacy and handling your personal data with care, transparency, and in full compliance with applicable data protection laws. This Privacy Policy explains how we collect, use, store, and safeguard your information when you interact with our website, services, or team. By using our services, you agree to the practices outlined below.

1. Information We Collect

We may collect and process personal data depending on how you engage with us, including:

• Contact Details: Such as your name, phone number, email address, and business or company information when you fill out a form, get in touch, or sign up to our services.

• Service Data: Information relating to the payroll or umbrella services we provide to you, including payment details and billing information.

• Technical Information: This includes IP address, browser type, device information, and browsing behaviour (e.g., pages viewed, clicks, and session duration).

• Communication Records: Emails, messages, phone calls, and any interactions you have with our team or website.

• Usage Insights: Data on how you use our platform or services, including features accessed and frequency of use.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• Service Delivery: To provide and manage the payroll, umbrella, or CIS services you request from us.

• Customer Support: To respond to your queries, resolve issues, and keep you updated about your account.

• Service Improvement: To improve our website, tools, and services based on usage patterns and feedback.

• Marketing (With Consent): To send service updates, newsletters, or offers we think may interest you. You can opt out at any time.

• Legal & Regulatory Compliance: To meet our obligations under UK law, including HMRC and employment-related regulations.

3. Legal Grounds for Processing

We process your data under one or more of the following legal bases:

• Contractual Requirement: When data is necessary to deliver the services you’ve requested.

• Consent: When you’ve given clear permission—for example, to receive marketing emails.

• Legitimate Interest: When processing is needed to improve our services or ensure security.

• Legal Obligation: When we’re required by law to process or retain your information.

4. Sharing Your Information

We only share your personal data when necessary, including:

• Authorised Service Providers: Trusted third parties who assist in delivering our services, such as IT support or payment platforms. These providers are contractually bound to handle your data securely and only for agreed purposes.

• Regulatory Bodies: If required by law or regulation, we may disclose your data to government bodies or legal authorities.

• Business Changes: In the event of a company merger, acquisition, or restructure, your data may be transferred to the new entity with full safeguards in place.

5. Data Security

We take data security seriously and use appropriate measures to protect your information, including:

• Encryption: Sensitive data is encrypted during transmission and storage.

• Restricted Access: Only authorised personnel have access to your personal data.

• System Monitoring: We regularly review and update our security protocols to maintain resilience.

While we follow best practices, no digital system is entirely immune to risk. We are committed to taking swift and appropriate action should any breach occur.

6. Data Retention

We retain personal data only as long as needed to fulfil the purposes it was collected for, including legal and regulatory obligations. Once no longer required, your data will be securely deleted or anonymised in accordance with data protection standards.

7. Your Rights

As a data subject, you have the following rights under UK GDPR:

• Access: Request a copy of the personal data we hold about you.

• Correction: Ask us to update or amend inaccurate or incomplete data.

• Erasure: Request deletion of your data when it’s no longer required, subject to legal conditions.

• Restriction: Ask us to limit how we process your data in certain situations.

• Objection: Object to specific types of data processing, such as marketing.

• Data Portability: Request the transfer of your personal data to another provider.

To exercise these rights, please contact us at:
📧 Email: info@thornleighpayroll.co.uk
📞 Phone: 0333 0388771

8. Cookies & Tracking Technologies

Our website uses cookies and similar tools to enhance your browsing experience and understand how visitors interact with our content. Cookies help us personalise your visit, remember preferences, and improve site functionality. You can adjust your cookie preferences at any time via your browser settings. For full details, see our [Cookie Policy].

9. Updates to This Policy

We may update this Privacy Policy occasionally to reflect changes in law, our services, or how we manage personal data. All updates will be posted on this page, and where appropriate, we’ll notify you of significant changes. We recommend reviewing this policy from time to time.

10. Contact Us

If you have any questions, concerns, or requests regarding your personal data or this policy, please don’t hesitate to get in touch:

Thornleigh Limited
📍 Address: Cumberland House, Grosvenor Square, Cumberland Place, Southampton, England, SO15 2BG
📞 Phone: 0333 0388771
📧 Email: info@thornleighpayroll.co.uk

We’re committed to protecting your privacy and will respond to any enquiry promptly and professionally.