Privacy Policy

Privacy Statement for Arundell People Services (Website)

Effective date: July 2026

1. Who we are

Arundell People Services (“we”, “us”) provides investigation, mediation, coaching and organisational development services, including work with public sector organisations, minors, vulnerable adults and high‑profile individuals.

Chris Johnson is the Data Protection Officer (DPO).

If you have any questions about this statement, how we use personal data, or would like to contact the DPO, you can contact us at:

• Email:      enquiries@ArundellPeopleServices.com 
• Postal      address: Former Atherstone College, Ratcliffe Road, Atherstone, CV9 1LF 

2. The type of personal information we collect via the website

Through our website we may collect and process:

• Identity      and contact details (for example name, email address, telephone number,      job title, organisation).
• Information      you provide in enquiry forms or emails (for example details about your      organisation, the nature of your enquiry, and any background you choose to      share).
• Newsletter      or mailing list preferences.
• Technical      and usage information, including IP address, browser type and version,      time zone setting, operating system, pages viewed and link clicks,      collected through logs, cookies and similar technologies.
• Marketing      and communications preferences.

We do not seek to collect special category or criminal offence data through our website forms. If you voluntarily include such information, we will handle it carefully and may contact you to discuss the most appropriate way to manage your enquiry.

3. How we obtain your information

We obtain personal information when:

• You      complete a contact form or otherwise get in touch via the website.
• You      subscribe to a mailing list or ask to receive updates from us.
• You      engage with us on social media or via links on the website.
• You      browse the website, which may result in technical and usage data being      collected through cookies and similar technologies.

We may also receive personal information indirectly if, for example, a client organisation provides us with contact details for staff who will work with us, or if someone refers you to us.

4. How and why we use website‑related personal data

We use website‑related personal data to:

• Respond      to enquiries and provide information about our services.
• Set      up and manage client relationships and projects where contact begins via      the website.
• Send      you updates, briefings or newsletters where you have asked to receive them      or where we consider this to be in our legitimate interests and you have      not objected.
• Manage      and improve our website, services, marketing and user experience.
• Keep      appropriate records and comply with legal, regulatory and professional      obligations.

We do not sell your personal data.

5. Our lawful bases for processing

Under UK data protection law, we must have a lawful basis to process personal data. Depending on the context, we may rely on:

• Contract     – where processing is necessary to enter into or perform a contract with      you or the organisation you represent.
• Consent     – for example, where you have asked to receive marketing communications or      where cookies that are not strictly necessary are used. You can withdraw      consent at any time.
• Legitimate      interests – where processing is necessary for our legitimate interests      (or those of a third party) and these are not overridden by your rights      and interests. This may include responding to unsolicited enquiries,      maintaining and improving our website and services, or sending      appropriate, limited marketing to existing contacts.
• Legal      obligation – where processing is necessary to comply with a legal      obligation, for example in relation to accounting, tax or regulatory      requirements.

Where we rely on legitimate interests, we consider the balance between those interests and your rights and expectations before proceeding.

6. Cookies and similar technologies

Our website may use cookies and similar technologies to:

• Make      the site work properly and keep it secure.
• Remember      your preferences.
• Understand      how visitors use the site, so that we can improve content and navigation.

Where cookies are strictly necessary for the operation of the site, they will be set automatically. For other types of cookies (for example analytics or marketing cookies), we will seek your consent through a banner or preference centre. You can change your cookie settings in your browser or via our cookie tool.

7. Sharing of personal data

We may share website‑related personal data with:

• Trusted   service providers who support our website, IT, email and other business      systems (for example hosting providers, email platforms, analytics tools),      all of whom are required to handle data securely and only in accordance      with our instructions.
• This may include carefully selected providers of Artificial Intelligence technologies acting as our data processors, where appropriate contractual, security and confidentiality measures are in place.
• Client      organisations, where this is necessary for the performance of a contract      with you or the organisation you represent (for example contact details of      key client representatives).
• Professional      advisers, insurers, regulators or law enforcement, where this is necessary      in the context of legal, regulatory or safeguarding obligations.

We do not publish personal contact details or enquiry content on our website without your consent.

8. International transfers

If any of our service providers or systems are located outside the UK, we will ensure that appropriate safeguards are in place before personal data is transferred; for example, an adequacy decision, the International Data Transfer Agreement or contractual clauses approved for use under UK data protection law.

Details of current international transfers can be provided on request.

9. How long we keep your information

We will retain personal data collected through the website only for as long as necessary to fulfil the purposes described above, including any legal, accounting or reporting requirements.

Retention periods may vary depending on the nature of the information and the context of the relationship. For example:

• Enquiries      which do not lead to ongoing work may be retained for a limited period to      help us understand demand and respond to follow‑up queries.
• Contact      details for active or recent clients may be retained in line with our      broader retention schedule for client records.
• Mailing      list information will be retained while you remain subscribed; if you      unsubscribe, we will keep a record of that fact so that we do not contact      you again via that list.

10. How we keep your information secure

We take appropriate technical and organisational measures to protect personal data, including:

• Secure      hosting and up‑to‑date security measures on our website and systems.
• Access      controls so that only those who need personal data for their role can see      it.
• Encryption      and secure transfer methods where appropriate.
• Staff      training, policies and procedures on data protection and information      security.

No system can be completely secure, but we aim to reduce risks by following recognised good practice and reviewing our arrangements regularly.

Appropriate governance, monitoring and human oversight for any Artificial Intelligence tools used to process personal data.

11. Use of Artificial Intelligence (AI)

Use of Artificial Intelligence (AI)

Arundell People Services may use Artificial Intelligence (AI) technologies to support certain administrative, operational and business functions. This may include assisting with document drafting, summarising information, improving internal efficiency, analysing non-sensitive business information, or supporting customer communications.

Where AI is used in connection with personal data, it is used in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable Information Commissioner's Office (ICO) guidance.

We do not rely solely on AI to make decisions that produce legal or similarly significant effects on individuals. Any decisions relating to investigations, mediation, coaching, safeguarding, employment matters or other professional services are made by appropriately qualified individuals, with human oversight and professional judgement.

We implement appropriate technical and organisational measures to protect personal data processed using AI technologies. Where third-party AI providers are used, we take reasonable steps to ensure they provide appropriate security, confidentiality and data protection safeguards, including contractual obligations where required.

We continually review our use of AI to ensure it remains lawful, proportionate, secure and consistent with our professional and ethical obligations.

12. Your data protection rights

You have a number of rights in relation to your personal data, subject to certain conditions and exemptions under UK law. These include:

• Right      of access – to request a copy of the personal data we hold about you      and information about how we use it.
• Right      to rectification – to ask us to correct inaccurate or incomplete data.
• Right      to erasure – in certain circumstances, to ask us to delete your      personal data.
• Right      to restriction – to ask us to limit how we use your data in certain      situations.
• Right      to object – to object to certain types of processing, including direct      marketing and processing based on legitimate interests, in some cases.
• Right      to withdraw consent – where we rely on consent, you can withdraw it at      any time.
• Right      to data portability – in certain circumstances, to receive your data      in a structured, commonly used and machine‑readable format and to have it      transmitted to another controller.

If you wish to exercise any of these rights, please contact us at enquiries@ArundellPeopleServices.com.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data. The ICO’s website is at ico.org.uk; their helpline number is 0303 123 1113.

13. Links to other websites

Our website may contain links to other websites. This privacy statement does not cover those sites and we are not responsible for their content, security or privacy practices. You should read the privacy notices on any other websites you visit.

14. Changes to this privacy statement

We may update this privacy statement from time to time to reflect changes in our practices, legal requirements or guidance. The effective date at the top of the statement will show when it was last updated.