GDPR
Our Commitment to Data Protection
HSMK LIMITED is committed to protecting the privacy and security of personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect, process, and store personal data that is necessary for the provision of our services and the fulfilment of legal obligations.
Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
Contract – where processing is necessary to deliver our payroll or workforce supply services.
Legal Obligation – where processing is required to comply with applicable laws, including HMRC reporting.
Legitimate Interests – where processing is necessary for the operation and improvement of our services, provided it does not override your rights.
Consent – where you have explicitly agreed to specific processing activities.
Data Collection and Use
We collect personal data directly from clients, workers, and authorised third parties for purposes including:
Payroll processing and payment
HMRC and pension submissions
Workforce placement and scheduling
Compliance checks and identity verification
Communication regarding services
We do not sell personal data to third parties.
Data Security
We use appropriate technical and organisational measures to safeguard personal data against unauthorised access, alteration, loss, or disclosure. This includes encryption, secure servers, and access controls.
Data Retention
We retain personal data only for as long as necessary to meet our contractual, legal, and regulatory obligations. Payroll records are typically retained for at least six years in line with HMRC requirements.
Your Rights Under UK GDPR
You have the right to:
Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your data (where applicable)
Restrict or object to certain processing activities
Request transfer of your data to another controller
Withdraw consent at any time where consent is the legal basis for processing
To exercise any of these rights, please contact us using the details below.