Privacy policy

Conflict Resolution Ltd is committed to protecting your privacy and handling personal data responsibly. This notice explains how we collect, use, store and share personal data in connection with our workplace culture review, workplace mediation and workplace investigation services, our website, and our webinars and events, in accordance with the UK GDPR and the Data Protection Act 2018.

 

About Us

This website is run by Conflict Resolution Ltd, registered in England and Wales, company number 16559600. Registered office: Units 1–6 Commercial Road, Corby NN17 5XG. ICO registration reference: ZB950175.

 

Scope of this Notice

This notice covers personal data we collect directly: for example, from people who contact us, book a call, register for a webinar, engage us for mediation or an investigation, or commission a workplace culture review.

Where we are engaged by an organisation to conduct staff interviews, surveys, focus groups or an investigation, the individuals taking part are given a separate, engagement-specific privacy briefing at the time. It explains in more detail how their contribution will be used, retained and reported. This notice describes our processing at a general level; the engagement briefing takes precedence for participants in a specific engagement.

 

What Personal Data We Collect

• Name, job title and contact details
• Information about your organisation or role
• Details of the enquiry, dispute or engagement (for example, the presenting concern and scope discussed)
• Details you give when booking a call with us
• Details you give when registering for one of our webinars or events (name, email address, organisation and any answer to our registration question), and whether you attended
• Mediation agreements and outcome summaries
• Workplace culture review records (for example, discovery meeting notes, engagement scope and findings prepared for the commissioning organisation)
• Communications with us (emails, calls and forms)
• Payment and invoicing information

 

How We Use Your Personal Data

• Deliver workplace culture review, mediation and investigation services
• Communicate with you about your case or engagement
• Arrange and hold calls you book with us
• Run webinars and events, including sending joining details and reminders, and following up afterwards
• Manage bookings, contracts and payments
• Comply with legal and regulatory obligations
• Improve our services and maintain professional records

 

Lawful Basis for Processing

• Contractual necessity: to provide the service you have engaged us for
• Legal obligation: to comply with applicable laws and regulations
• Legitimate interests: to manage our business, run our events, keep in touch with people who have shown an interest in our work and maintain professional records, balanced against your rights and interests
• Consent: where required, particularly for marketing communications

 

Automated Decision-Making and AI

We do not make decisions about individuals using solely automated processes, including profiling. During workplace culture reviews, we may use AI tools to help identify overall trends in survey data, rather than to assess any individual's responses. Survey data is anonymised before any such analysis, and all findings are reviewed and interpreted by us and reported at a group level.

 

Do You Have to Provide Your Data?

You do not have to give us your personal data. However, if you do not, we may not be able to respond to your enquiry, register you for an event or provide our services. Where we work with you under a contract, some information is needed to deliver the service and to meet our legal obligations, such as invoicing.

 

Special Category Data

Workplace investigations and workplace culture reviews can, in the course of confidential interviews or surveys, surface special category data, such as health information or data revealing trade union membership, volunteered by participants as context for a workplace concern. We do not seek to collect this data; it is received where relevant to the matter being investigated or assessed.

Where this occurs, it is processed under the employment condition or, where relevant, a substantial public interest condition, set out in Schedule 1 of the Data Protection Act 2018. Full detail of our procedures for handling this data, including our retention and erasure policy, is set out in our Appropriate Policy Document, available on request.

 

Confidentiality

Workplace culture review, mediation and investigation engagements are conducted on a confidential basis. We retain limited records (for example, date, parties involved and outcome summary) to comply with legal obligations, defend against potential legal claims, and maintain business continuity and quality assurance. We do not retain the full detail of what was discussed beyond what is necessary for these purposes, unless required by law or with explicit consent.

 

Keeping in Touch

If you register for one of our webinars or events, enquire about our services or work with us, we may occasionally email you about future events and services we think may interest you. Every email includes a simple way to opt out, and you can ask us to stop at any time by emailing jon@conflict-resolution.co.uk. We never sell your details or share them for anyone else's marketing.

 

Data Retention

We keep personal data only for as long as we need it:

• Enquiries and introductory calls that do not lead to work: two years from our last contact
• Webinar and event registrations: two years, or until you ask us to stop contacting you
• Marketing contact details: until you unsubscribe or withdraw consent
• Workplace culture review records (for example, interview notes, survey data and focus group notes): the duration of the engagement plus six months, unless a live grievance, dispute or legal claim requires them to be kept longer
• Mediation and workplace investigation case files: for the period set out in the terms agreed for each engagement
• Limited summary records of engagements (for example, date, parties involved and outcome summary): up to six years after the engagement ends
• Client contracts, invoices and payment records: six years from the end of the financial year they relate to, as required by HMRC

Data is securely deleted or anonymised when no longer needed. Full retention schedules for special category data are set out in our Appropriate Policy Document.

 

Who We Share Personal Data With

We do not sell or rent personal data. We may share data with:

• Professional advisers (for example, legal or financial advisers)
• IT service providers who support our business, including Microsoft (email, Microsoft Teams meetings and webinars, and Microsoft Bookings), Wix (our website and its contact form) and our survey platform provider, which is UK-based. These providers act on our instructions and must keep your data secure.
• The organisation that has commissioned a workplace culture review, in the form of findings and thematic reporting, not attributed to named individuals unless expressly agreed
• Regulatory bodies or law enforcement, if legally required
• Other parties involved in mediation, with your explicit consent

All third parties are required to comply with UK GDPR and to maintain appropriate security.

 

International Transfers

Our website is hosted by Wix, and we use Microsoft 365 for email, online meetings, webinars and call bookings. These providers may store or process personal data outside the UK, including in the European Economic Area and the United States. Where this happens, the transfer is protected by safeguards recognised under UK data protection law, such as the UK–US data bridge, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Data relating to our workplace culture review, mediation and investigation engagements is held separately by us on encrypted, UK-based storage and is not transferred outside the UK.

 

Your Rights

• Access your personal data
• Request correction or deletion
• Object to or restrict processing, including objecting to marketing at any time
• Request data portability, where processing is based on consent or contract and carried out by automated means
• Withdraw consent, where applicable
• Lodge a complaint with the Information Commissioner's Office (ICO), ico.org.uk

 

Security Measures

• Encrypted storage and secure, UK-hosted platforms
• Access controls restricting data to those directly involved in an engagement
• Regular review of data handling procedures and this notice

 

Cookies and Website Analytics

Cookies and similar tracking technologies are governed separately from the UK GDPR, under the Privacy and Electronic Communications Regulations (PECR). Cookies that are strictly necessary for the website to function do not require consent. Any other cookie, including analytics and any advertising or social media tracking, requires your prior, opt-in consent before it is set, given through a clear choice such as an ‘Accept’ or ‘Reject’ option, with both given equal prominence. Consent is not implied by continuing to browse the site.

This website is built on Wix, which by default uses cookies to operate the site (for example, session and login functionality) and to provide the site owner with visitor analytics. Non-essential cookies are managed through a consent banner powered by Usercentrics, which blocks these cookies until a visitor has responded and keeps a log of consent given. This website uses the following categories of cookie:

• Strictly necessary cookies: required for the site to function; these do not require consent.
• Analytics cookies: used to understand how visitors use the site; these require your consent.

When you first visit the site, you are asked to accept or reject non-essential cookies, with both options given equal prominence. You can change your choice at any time via the cookie settings link on the site. No non-essential cookies are set until you have given consent.

 

Contact Us

If you have a question about this notice or how your information is handled, want to exercise your rights or want to make a complaint, please email jon@conflict-resolution.co.uk.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ico.org.uk).

 

Changes to This Notice

We may update this notice from time to time to reflect changes in our services or the law. The latest version will always be available on our website.