Legal

Privacy Policy

Last updated: January 2026

1. Introduction

Signature Associates ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are a consultancy providing HR, finance and talent development services to businesses across the United Kingdom. Our registered address is Parallel House, 32 London Road, Guildford, Surrey, GU1 2AB.

2. Data We Collect

We may collect and process the following categories of personal data:

  • Contact data: name, email address, phone number, company name and job title when you contact us or book a discovery call.
  • Client data: information provided during engagement, including employee data processed on behalf of our clients under data processing agreements.
  • Website data: IP address, browser type, pages visited, and usage data collected via cookies and analytics.
  • Marketing data: preferences in receiving communications from us, where you have opted in.

3. How We Use Your Data

We process personal data for the following purposes:

  • Responding to enquiries and providing consultancy services.
  • Scheduling and conducting discovery calls and meetings.
  • Sending newsletters and marketing communications where you have consented.
  • Maintaining records for legal, tax and accounting purposes.
  • Improving our website and services.

4. Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

  • Consent: for marketing communications and non-essential cookies.
  • Contract: for processing necessary to deliver services under our client agreements.
  • Legal obligation: for tax records, employment law compliance and regulatory requirements.
  • Legitimate interests: for responding to enquiries, website analytics and business operations.

5. Data Sharing

We do not sell your personal data. We may share data with:

  • Our associate consultants, subject to confidentiality agreements.
  • Professional advisers (legal, accounting) where necessary.
  • IT service providers who host our website and email systems.
  • Regulatory or law enforcement bodies where legally required.

6. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Client data is retained in accordance with our client agreements and applicable legal requirements (typically 6-7 years for financial and employment records).

7. Your Rights

Under UK GDPR, you have the following rights:

  • The right to be informed about how we use your data.
  • The right of access to your personal data.
  • The right to rectification of inaccurate data.
  • The right to erasure ("right to be forgotten").
  • The right to restrict processing.
  • The right to data portability.
  • The right to object to processing.
  • Rights in relation to automated decision-making.

To exercise any of these rights, please contact us at info@signatureassociates.co.uk.

8. Cookies

Our website uses cookies to improve functionality and analyse traffic. You can control cookies through your browser settings. We use only essential cookies by default, with analytics cookies requiring your consent.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data, including encryption, access controls and secure data storage. We do not transfer personal data outside the UK without appropriate safeguards.

10. International Transfers

As our associate network spans Ireland, Europe, the GCC, Australia and South Africa, we may transfer personal data internationally. We do so only with appropriate safeguards in place, such as UK International Data Transfer Agreements or adequacy regulations.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on this page with a revised date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.