Privacy Policy

Impact Employment Law Limited (company number 17177617) is registered in England and Wales. Our registered office is at 4 Main Street, Ashby de la Launde, Lincoln, England, LN4 3JG.

We provide employment law and HR advice to our clients. We are not a law firm and we are not regulated or authorised by the Solicitors Regulation Authority. We act as an independent consultancy to our clients.

Oliver Tasker is the data controller responsible for the personal data we collect through this website. You can contact us at oliver@impactemploymentlaw.co.uk.

We collect and process personal data that is necessary for providing our services and running our business. This may include:

• Identification and contact details such as name, job title, business address, email address and telephone number.
• Employment information such as role, reporting lines, performance and conduct records, grievance and disciplinary details, training and attendance records, and remuneration and benefits information.
• Case-related information provided by our client or by you in connection with HR advisory work, investigations, mediations, grievances, disciplinaries, restructures, redundancies and settlement discussions.
• Communications such as emails, meeting notes and call records.
• Payment and billing information relating to our client accounts.
• Technical and usage data such as IP address, device information and browsing data when you use our website (if you consent to analytics cookies) or client portals, collected via cookies or similar technologies.

We may receive personal data directly from you, from our client (your employer or prospective employer), from their other advisers, from third-party platforms we use to deliver services, or from publicly available sources such as Companies House and LinkedIn.

In the course of providing employment and HR advice, we may process special category data. This can include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for identification purposes, health data, and data concerning a person’s sex life or sexual orientation.

How we collect it: We typically receive special category data from our client as employer or prospective employer, from you directly where you choose to provide it, or from third parties engaged in a matter (for example occupational health providers or mediators) where appropriate and lawful. We only seek special category data where it is necessary for the specific advisory task, such as handling sickness absence, disability adjustments, family leave, trade union matters, discrimination complaints or equal opportunities monitoring.

How we use it: We use special category data strictly for defined purposes, including advising on HR processes and employment law issues, conducting or advising on investigations, handling grievances and disciplinaries, managing absence and capability matters, supporting reasonable adjustments, advising on equalities and discrimination issues, assisting with settlement discussions, and meeting our legal and regulatory obligations.

Lawful bases and conditions: We rely on one or more of the following conditions to process special category data:

• Explicit consent from the data subject for one or more specified purposes which can be withdrawn at any time without affecting prior processing.
• Processing necessary for carrying out obligations and exercising specific rights in the field of employment and social security and social protection law, in accordance with UK law and appropriate safeguards.
• Processing necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.
• Processing necessary for reasons of substantial public interest under UK law.

How we protect it: We apply enhanced access controls and we have a secure document portal. Access to special category data is limited to personnel who need it for the relevant task.

• To respond to your enquiry.
• To improve our website (only with your consent).
• To provide ongoing support if you become a client.
• To comply with our legal obligations.

We process personal data for the following purposes and on the following lawful bases:

• Providing HR and employment law advice and support to our clients, including managing instructions, advising on processes, drafting documents and correspondence, and supporting resolution of workplace issues. Lawful bases: performance of a contract with our client; legitimate interests in delivering professional services; establishment, exercise or defence of legal claims where relevant.
• Client onboarding, managing our relationship, billing and payments, and credit control. Lawful bases: performance of a contract; legitimate interests in running our business.
• Operating, maintaining and improving our services, website and IT systems, including security monitoring and incident response. Lawful bases: legitimate interests in safeguarding our systems and services; compliance with legal obligations.
• Compliance with legal obligations, including tax, accounting and record-keeping. Lawful bases: legal obligation.
• Marketing our services to business contacts and prospective clients, including sending updates and event invitations. Lawful bases: legitimate interests in promoting our services; consent where required under e-privacy rules. You can opt out at any time.

Where we rely on legitimate interests, we have conducted a balancing assessment and determined that our interests are not overridden by your rights and freedoms. You can obtain further information by contacting us.

• Contact form submissions:24 months from receipt, then deleted unless you’ve become a client.
• Client records: 6 years after the end of our relationship, in line with professional record-keeping norms.
• Analytics data:per Google Analytics defaults (typically 14 months) and Vercel Analytics’ retention defaults.

We may share personal data with:

• Our client as controller, where we are engaged to advise them on HR and employment matters.
• Third-party service providers who support our business, such as IT hosting, document management, communications platforms, and professional advisers, under contracts that require appropriate security and confidentiality.
• Third parties involved in a matter, such as mediators, occupational health providers, specialist consultants or counsel, where necessary and lawful.
• Law enforcement, regulators, courts, tribunals or government bodies where required by law or necessary for legal claims.
• Potential buyers, investors or funders of our business, subject to confidentiality obligations, for due diligence purposes.
• We use Google Analytics and Vercel Analytics for site analytics, only with your consent.
• We use Resend (or a similar transactional email provider) to send notification and acknowledgement emails when you submit the contact form.

We do not sell personal data.

If we transfer personal data outside the UK (or permit access from outside the UK), we will ensure appropriate safeguards are in place, such as adequacy regulations, International Data Transfer Agreements or Addenda, or other appropriate safeguards. Details are available on request if this applies.

Depending on the circumstances and subject to exemptions under data protection law, you have the following rights:

• To be informed about our processing of your personal data.
• To request access to your personal data.
• To request rectification of inaccurate or incomplete data.
• To request erasure of your data.
• To request restriction of processing.
• To object to processing based on our legitimate interests or for direct marketing.
• To data portability for data you provided to us, where processing is based on consent or contract and carried out by automated means.
• To withdraw consent at any time where we rely on consent.

Email us at oliver@impactemploymentlaw.co.uk. We’ll respond within one calendar month.

If you’re not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO). Our ICO registration is ZC140508. You can find the ICO at ico.org.uk or call 0303 123 1113.

We use cookies as described in our Cookie Policy. You can manage your preferences via the “Manage cookie preferences” link in the footer at any time.

We implement technical and organisational measures appropriate to the risk, including access controls, encryption, secure configuration and monitoring, staff training, supplier due diligence, incident response procedures and regular reviews of our controls. We also take steps to ensure the ongoing confidentiality, integrity, availability and resilience of our processing systems and services.

In limited scenarios, we may act as a processor on behalf of a client. Where we act as processor, we process personal data only on the client’s documented instructions and in accordance with our contract with the client. In such cases, the client’s privacy notice will apply to their processing as controller.

We may update this privacy policy from time to time. The most recent version will always be available at this URL. Significant changes will be notified to active clients.