Privacy Policy for Cobalt Crew
Cobalt Crew is committed to protecting the privacy and security of your personal data. This policy explains how we collect, use, and safeguard the information you provide to us when you visit our site, engage with our services, or communicate with us. As a Human Resources Consulting and Solutions firm, we understand the critical importance of data integrity and confidentiality.
1. Information We Collect
We collect various types of information to provide and improve our HR consulting services effectively. This may include:
- Personal Identification Information: Name, professional title, company name, contact details (email address, phone number, physical address), and other information you voluntarily provide in connection with our services, inquiries, or events.
- Professional Information: Details related to your HR needs, company size, industry, current HR strategies, and other data relevant to the consulting services you seek from us.
- Technical Data: IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our site. This is collected automatically via cookies and similar technologies.
- Usage Data: Information about how you use our site, products, and services, including navigation paths, service preferences, and interaction length.
2. How We Use Your Information
We use the information we collect for various purposes, primarily to deliver our HR consulting and solutions effectively and to enhance your experience with Cobalt Crew:
- To provide HR strategy development, talent acquisition and retention, employee engagement programs, performance management systems, and other consulting services.
- To respond to your inquiries, provide support, and manage our relationship with you.
- To process and deliver HR policy and compliance advice, diversity and inclusion initiatives, and compensation and benefits consulting.
- To manage payment processing and accounting for services rendered.
- To improve our site, services, and operations, including HR technology implementation solutions.
- To send you relevant updates, newsletters, and marketing communications about our services, where you have consented to receive them.
- To comply with legal obligations and protect our legitimate business interests.
3. Legal Basis for Processing Personal Data (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data under the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to our newsletter).
- Contract: Where processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request before entering into a contract (e.g., providing HR consulting services).
- Legal Obligation: Where processing is necessary for compliance with a legal obligation that we are subject to (e.g., tax or regulatory requirements).
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your fundamental rights and freedoms (e.g., improving our services, operating our site, preventing fraud).
4. Sharing Your Information
We do not sell your personal data to third parties. We may share your information with:
- Service Providers: Trusted third-party service providers who assist us in operating our site, conducting our business, or serving our clients (e.g., IT support, payment processors, analytics providers). These parties are obligated to keep your information confidential and use it only for the purposes for which we disclose it to them.
- Legal and Regulatory Authorities: When required by law or in response to valid requests by public authorities (e.g., a court order or government agency).
- Business Partners: In connection with or during negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
5. International Data Transfers
As a UK-based company, your data will primarily be processed within the UK and European Economic Area (EEA). If we transfer your personal data outside of the UK or EEA, we ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the European Commission or the UK Information Commissioner's Office, or by transferring to countries deemed to provide an adequate level of data protection.
6. Data Security
We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.
7. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
8. Your Data Protection Rights
Under GDPR, you have the following rights regarding your personal data:
- The right to access: You have the right to request copies of your personal data.
- The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
- The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The right to withdraw consent: Where our processing is based on your consent, you have the right to withdraw that consent at any time.
If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us using the details below.
9. Cookies
Our site uses cookies to enhance user experience and analyze site usage. Cookies are small data files placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our site.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any changes.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Cobalt Crew17 Regent Terrace, Floor 3,
Edinburgh, Scotland,
EH7 5BL,
UK