Privacy Policy

You acknowledge that we are independent controllers with respect to any personal data of your employees and other personnel that you disclose to us in connection with the preparation of the HR Documents and the provision of the HR Services (“Shared Personal Data”). Notwithstanding the foregoing, we shall only process the Shared Personal Data for the purposes of providing services to you, managing the relationship between you and us, managing risks and our own record keeping. Each party shall comply with the all applicable laws relating to the processing of personal data (the “Data Protection Laws“) with respect to its own processing of the Shared Personal Data. You must ensure that any Shared Personal Data that you disclose to us has been collected or otherwise obtained in accordance with the Data Protection Laws, and that the disclosure does not itself breach the Data Protection Laws. We shall be responsible for ensuring that the transparency requirements of the Data Protection Laws with respect to our own processing of the Shared Personal Data are met. You shall be responsible for ensuring those transparency requirements with respect to your own processing of the Shared Personal Data are met, providing that you must provide each relevant data subject a copy of our data protection information notice (as supplied to you from time to time). Each party shall, at the request and expense of the other party, provide to that other party all reasonable assistance, information and cooperation as may be necessary to enable the other party to comply with the Data Protection Laws with respect to the processing of the Shared Personal Data. If we receive a communication from a supervisory authority relating to the Shared Personal Data, we shall promptly, to the extent permitted by applicable law and the relevant supervisory authority, send a copy of the content of the communication to you. Each party shall provide to the other party, at the request of the other party, reasonable cooperation and assistance in relation to any complaint, investigation, communication or other action by a supervisory authority to the extent that it relates to that party’s: (a) disclosure of the Shared Personal Data to the other party; or (b) processing of the Shared Personal Data. If a party receives a communication from a data subject (including any exercise of the legal rights of the data subject) relating to the Shared Personal Data, the party in receipt of the communication shall promptly, to the extent permitted by applicable law, send a copy of the content of the communication to the other party. Each party shall provide to the other party, at the request of the other party, reasonable cooperation and assistance in responding to any communication from a data subject relating to the Shared Personal Data. Each party shall, to the extent permitted by applicable law, reasonably consult with the other party before responding to any communication from a data subject relating to the Shared Personal Data. Each party shall implement and maintain appropriate technical and organisational security measures in relation to the processing of the Shared Personal Data. We shall delete Shared Personal Data within HR Documents that we store not more than 7 years, and not less than 6 years, after the termination of the Agreement.   If a party becomes aware of a personal data breach involving the Shared Personal Data of the other party, it shall promptly notify the other party in writing. Each party shall provide to the other party, at the request of the other party, reasonable cooperation and assistance in relation to any personal data breach which relates to the Shared Personal Data.   If any changes or prospective changes to the Data Protection Laws result or will result in one or both parties not complying with the Data Protection Laws in relation to processing of personal data carried out under or in relation to the Agreement, then the parties shall use their best endeavours promptly to agree such variations to the Agreement as may be necessary to remedy such non-compliance.   The applicable data protection laws also give you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns or telephone: 0303 123 1113. MyAmbition Limited, a Human Resources consultancy that provides solutions in England, Scotland and Wales. We are incorporated and registered in England with registration number 05683054 and our registered office is 1c Fridays Court, 3-5 High Street, Ringwood, Hampshire, England, BH24 1AB.  Our VAT Number is 310188243