Privacy Policy
SetpointHQ is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
SetpointHQ is a recruitment marketing consultancy operating in the United Kingdom. The data controller responsible for your personal data is Andy Pirie, Director, SetpointHQ.
Contact: andy@setpointhq.com · setpointhq.com
2. What Data We Collect
We may collect and process the following categories of personal data:
- Contact information — your name, email address, job title and organisation name when you submit an enquiry via our contact form or email us directly
- Usage data — information about how you use our website, including pages visited, time spent, and referring sources, collected via Google Analytics
- Communications — records of correspondence between you and SetpointHQ
- Cookie data — see our Cookie Policy for full details
3. How We Use Your Data
We use your personal data for the following purposes:
- To respond to enquiries and provide the services you have requested
- To send you information about SetpointHQ services where you have given consent or we have a legitimate interest in doing so
- To improve our website and services through analytics
- To comply with our legal obligations
Our lawful bases for processing are: contract (where we are delivering a service to you), legitimate interests (responding to business enquiries, improving our services), and consent (marketing communications).
4. How Long We Keep Your Data
- Enquiry and contact form data — 3 years from last contact
- Client project data — 6 years from project completion (for tax and legal compliance)
- Website analytics data — 26 months (Google Analytics default)
- Marketing consent records — until consent is withdrawn
5. Who We Share Your Data With
We do not sell your personal data. We may share it with:
- Google — for website analytics (Google Analytics 4). Data is anonymised and processed under Google’s privacy policy.
- Email service providers — for sending responses to your enquiries
- Legal authorities — where required by law
6. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (the ‘right to be forgotten’)
- Object to processing based on legitimate interests
- Request restriction of processing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at andy@setpointhq.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
7. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. Our website is served over HTTPS. Access to personal data is restricted to those who need it to deliver our services.
8. International Transfers
Some of our service providers (including Google) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. We encourage you to review this policy periodically.
10. Contact
For any questions about this Privacy Policy or how we handle your data, please contact us.