Privacy Policy

FCM Consultancy — Privacy Policy

Last updated: 27/11/2025

FCM Consultancy ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, protect, and share your information when you use our website or engage our services.
‍
1. Who We Are
FCM Consultancy
Email: Karen@fcmconsultancy.com
Mobile: 07872185790
ICO Registration Number: [Insert ICO number - apply at ico.org.uk]
We act as a Data Controller under the UK GDPR, EU GDPR (where applicable), and the Data Protection Act 2018.

2. What Personal Data We Collect
We collect and process the following categories of personal data:
‍
2.1 Information You Provide Directly
Name, email address, phone number
Business name and job title
Company information
Enquiry or service request details
Documents you upload (CVs, policies, contracts, etc.)
Payment and billing information
Communications with us (emails, phone calls, meeting notes)

2.2 Automatically Collected Data
IP address
Browser type and version
Device information
Pages visited and time spent on our website
Referring website addresses
Cookie data (see Section 10)

2.3 Client Service Data
When providing HR consultancy and recruitment services, we may process:
Employee personal data (names, contact details, employment records)
HR documentation (contracts, policies, handbooks)
Recruitment information (candidate CVs, application forms, interview notes)
Special category data including health information, diversity data, criminal convictions data (with explicit consent or legal basis)
Performance and disciplinary records
Payroll and benefits information

2.4 Third-Party Data
References and background check information
Data provided by recruitment candidates
Information from professional networks (LinkedIn, etc.)

3. How We Use Your Data
We use your personal data for the following purposes:
Service delivery
Communication
Contract performance
Payment processing
Website improvement
Marketing (with your consent)
Legal compliance
Business operations

4. Legal Basis for Processing‍
We process your personal data based on:
Contract
Legitimate interests
Legal obligation
Consent
Vital interests
Public interest/official authority
‍
For special category data (health, diversity information), we rely on:
Explicit consent
Employment law compliance
Legal claims defense
Substantial public interest

5. Who We Share Your Data With
We may share your personal data with:
‍
5.1 Service Providers
IT and cloud services (e.g., Microsoft 365, Google Workspace)
Website hosting provider
Analytics providers (Google Analytics)
Payment processors (e.g., Stripe, PayPal)
Accounting software (e.g., Xero, QuickBooks)

5.2 Professional Advisors
Solicitors, accountants, insurers, and business consultants

5.3 Legal Requirements
HMRC, ICO, or other regulatory bodies when legally required
Law enforcement or courts when compelled by law

5.4 Third Parties with Your Consent
Recruitment clients (when placing candidates)
Referees and background check providers
Training providers or partner consultancies

We ensure all third parties,
Are contractually bound to protect your data.
Process data only as instructed
Maintain appropriate security measures

6. International Transfers
‍
‍Some of our service providers may process data outside the UK or European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place:
‍Standard Contractual Clauses (SCCs) approved by the UK ICO/EU Commission
‍Adequacy decisions for countries deemed to have adequate data protection
‍UK/EU-US Data Privacy Framework for US-based providers (where certified)We will provide specific information about international transfers upon request.