Legal
Privacy Policy
Hello People Limited — how we handle your personal data
Last updated: April 2026
Note for legal review: This is a working draft prepared for review by a qualified solicitor before publication. It should not be treated as final legal advice. Hello People should engage a solicitor to review and approve this policy before the website goes live and before any personal data is collected.
Who we are
Hello People Limited is a strategic advisory and organisational transformation firm. Our registered address is in England and Wales. We are the data controller for personal data collected through this website.
Contact for data matters: sdm@hello-people.co.uk
What personal data we collect
We collect personal data when you interact with this website in the following ways:
| How you interact | Data collected |
|---|---|
| Submitting the contact form | First name, last name, email address, organisation name (optional), message content |
| Signing up to receive our thinking | First name, email address |
| Emailing us directly | Your email address, name and any information included in your message |
| Visiting this website | Anonymous usage data via cookies (see our Cookie Policy) |
We do not collect sensitive personal data (as defined under UK GDPR Article 9) and do not ask for it. If you include sensitive information in a message to us, we will handle it with appropriate care but ask that you only share what is necessary.
Why we collect it and our legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry or message | Legitimate interests — responding to a request you have made |
| Sending you our thinking and articles (if you signed up) | Consent — you explicitly signed up to receive this |
| Managing our client relationships | Legitimate interests / contract performance |
| Improving this website | Legitimate interests — anonymous analytics only |
How we store and protect your data
Contact form data and email sign-up data is stored in HubSpot, a cloud-based CRM platform. HubSpot is certified under the EU-US Data Privacy Framework and complies with UK GDPR requirements for international data transfers. You can review HubSpot's privacy policy at legal.hubspot.com/privacy-policy.
Email correspondence is stored in Stephen Dixon-Mould's email account, which is protected by two-factor authentication.
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or destruction.
How long we keep your data
| Data type | Retention period |
|---|---|
| Contact form enquiries that do not lead to an engagement | 2 years from the date of contact |
| Contact details for active or recent clients | 7 years from the end of the engagement (for legal and accounting purposes) |
| Email sign-up subscribers | Until you unsubscribe |
| Email correspondence | 7 years, in line with standard business record-keeping |
Who we share your data with
We do not sell your personal data. We do not share it with third parties for marketing purposes. The only third party we share data with is:
- HubSpot — our CRM platform, used to store contact enquiries and manage email sign-ups. HubSpot processes data on our behalf under a data processing agreement.
We may disclose personal data if required to do so by law, or in response to a valid legal request from a public authority.
Your rights under UK GDPR
You have the following rights in relation to your personal data:
- Right of access — you can request a copy of the personal data we hold about you
- Right to rectification — you can ask us to correct inaccurate data
- Right to erasure — you can ask us to delete your data in certain circumstances
- Right to restrict processing — you can ask us to limit how we use your data
- Right to data portability — you can ask for your data in a machine-readable format
- Right to object — you can object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, email us at sdm@hello-people.co.uk. We will respond within one month.
Unsubscribing from our mailing list
Every email we send includes an unsubscribe link. You can also email us at sdm@hello-people.co.uk to be removed from our list at any time. We will process your request within 5 working days.
Complaints
If you are unhappy with how we have handled your personal data, please contact us first at sdm@hello-people.co.uk and we will do our best to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
- Website: ico.org.uk
- Helpline: 0303 123 1113
Changes to this policy
We may update this policy from time to time. When we do, we will update the "last updated" date at the top of this page. We recommend checking this page periodically.