Privacy Policy

1. Who We Are

In Tandem Group Ltd
Company Number: 11364427
Registered Office:
71-75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom

We are the data controller for personal information processed in connection with our website and services. Data protection contact: dpo@intandemgroup.com

2. Scope and Applicable Law

This policy applies to personal information we collect and process in connection with our website at intandemgroup.com and the HR and employment law advisory services we provide.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we process personal data of individuals in the European Economic Area (EEA), we also comply with the EU GDPR (Regulation (EU) 2016/679).

3. Personal Information We Collect

We may collect and process the following categories of personal information:

Contact and identity information, including:

• Full name
• Job title and company name
• Email address and telephone number
• Correspondence sent through our contact forms or by email

Website usage data, including:

• IP address
• Browser type and device information
• Pages visited and time spent on site
• Referring URLs.

4. How We Use Personal Information

We use personal information for the following purposes:

• To respond to enquiries and provide information about our services
• To enter into and perform contracts for the provision of HR and employment law advisory services
• To manage ongoing client relationships and deliver work under those engagements
• To comply with legal, regulatory, and professional obligations
• To maintain accurate business records and internal administration
• To improve our website and service offering

5. Legal Basis for Processing

We process personal information under the following lawful bases:

• Contract performance, where processing is necessary to enter into or perform a contract with you or your organisation (UK GDPR Article 6(1)(b); EU GDPR Article 6(1)(b))
• Legitimate interests, where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights. This includes managing enquiries, improving our services, and maintaining business records (UK GDPR Article 6(1)(f); EU GDPR Article 6(1)(f))
• Legal obligation, where we are required to process information to comply with a legal or regulatory obligation (UK GDPR Article 6(1)(c); EU GDPR Article 6(1)(c))
• Consent, where we have obtained your consent, for example in relation to certain cookies or marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal

Where we process special category data (for example, health information or data about trade union membership) in the course of providing employment law services, we rely on Article 9(2)(b) of the UK GDPR and EU GDPR, processing necessary for the purposes of carrying out obligations in the field of employment law, and, where applicable, explicit consent.

6. Sharing Personal Information

We do not sell personal data to third parties. We may share personal information with:

• Trusted third-party service providers who support our business operations, including IT and software providers, professional advisers, and cloud storage providers. These parties process data on our behalf under appropriate data processing agreements
• Legal or regulatory authorities where required by law, court order, or to protect legal rights
• Professional advisers such as accountants, insurers, or lawyers, where necessary and subject to confidentiality obligations

We do not share personal information with third parties for their own marketing purposes.

7. International Transfers

Some of the service providers we use may store or process personal data outside the United Kingdom or the EEA. Where this occurs, we ensure that appropriate safeguards are in place, including:

• Transfers to countries with an adequacy decision from the UK Secretary of State or the European Commission, as applicable
• Use of the International Data Transfer Agreement (IDTA) approved by the UK ICO, or the EU Standard Contractual Clauses (SCCs) approved by the European Commission, as applicable

You may request further information about the specific safeguards in place for any transfer by contacting us at dpo@intandemgroup.com.

8. Retention

We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by applicable law or professional obligations. As a general guide:

• Client matter files and associated records, retained for a minimum of six years following the end of an engagement, consistent with the Limitation Act 1980
• Contact and enquiry records where no engagement followed, typically retained for up to two years
• Website usage and analytics data, subject to the retention settings of the relevant analytics provider

Different retention periods may apply depending on the nature of the engagement or applicable legal requirements.

9. Cookies and Analytics

Our website may use cookies and similar tracking technologies to understand how visitors use the site and to improve functionality and performance. Cookies are small text files placed on your device. We use the following types:

• Strictly necessary cookies, essential to the operation of the site. These cannot be disabled.
• Analytics cookies, used to collect anonymised information about how visitors use the site. We only set these with your consent.

You can manage or disable cookies through your browser settings or via our cookie consent tool when you first visit the site. Disabling certain cookies may affect the functionality of the website. For further information about cookies, visit: www.aboutcookies.org

10. Your Rights

Depending on your location and the applicable law, you may have the following rights in relation to your personal information:

• Right of access, to request a copy of the personal information we hold about you
• Right to rectification, to request correction of inaccurate or incomplete information
• Right to erasure, to request deletion of your personal information in certain circumstances
• Right to restriction, to request that we restrict processing in certain circumstances
• Right to data portability, to receive your information in a structured, commonly used format where processing is based on consent or contract
• Right to object, to object to processing based on legitimate interests, including profiling
• Right to withdraw consent, where processing is based on consent, to withdraw it at any time

To exercise any of these rights, please contact us at dpo@intandemgroup.com. We will respond within one month. We may need to verify your identity before processing your request. We will not charge a fee for handling requests unless they are manifestly unfounded or excessive.

11. Complaints

If you have concerns about how we handle your personal information, please contact us in the first instance at dpo@intandemgroup.com. We will aim to resolve your concern promptly and fairly.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority:

• United Kingdom: Information Commissioner's Office (ICO), ico.org.uk
• European Union: The supervisory authority in your EU member state. A list of EU supervisory authorities is available at edpb.europa.eu

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or business operations. The current version will always be published on our website. Where changes are material, we will take reasonable steps to bring them to your attention.