Privacy Policy
Last updated: March 2026
1. Controller
Hecpas, 11 Slingsby Place, St Martin's Courtyard, London, WC2E 9AB.
Contact: london@hecpas.com
2. Data We Collect
When you use contact forms or request a consultation on this website, we collect the personal data you provide: name, email address, phone number (optional), and your message. We also collect standard technical data (IP address, browser type, page visit duration) for website operation and security purposes.
3. Purpose and Legal Basis
Your data is processed to respond to your enquiry and, where applicable, to provide placement and recruitment services. The legal basis is your consent (Art. 6(1)(a) UK GDPR) and, where a service relationship is initiated, the performance of a contract (Art. 6(1)(b) UK GDPR).
4. Data Retention
Enquiry data is retained for up to 24 months from the date of last contact, unless a longer retention period is required by law or by the continuation of a service relationship.
5. Your Rights
You have the right to access, rectify, erase, restrict, or port your personal data. You also have the right to withdraw consent at any time and to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
6. Cookies
This website uses functional cookies necessary for operation, and optional analytics cookies where you have provided consent. See our Cookie Policy for details.
7. Third Parties
We do not sell your personal data. We may share data with trusted technical service providers acting as data processors under appropriate agreements.