Privacy Policy
Last updated: 18 August 2026
Who we are
HiFlex Partners Ltd is the data controller for the personal information described in this notice. Company number 17093475. Registered office: Rainbow House, 10-12 Lumina Way, Enfield, EN1 1FS.
What personal information we collect
We collect different information depending on your relationship with us.
If you contact us through this website: name, email address, phone number, the category you selected, any rate or hours information you provided, and the content of your message.
If you are paid by us: name, address, date of birth, National Insurance number, Unique Taxpayer Reference, bank details, right-to-work and identity documents, timesheet and payment records, and pension information.
If you are a client contact: name, job title, business contact details, and correspondence with us.
Collected automatically: this website sets no cookies and uses no analytics. Our hosting provider keeps standard server logs, which include IP addresses, for security and troubleshooting.
Why we use it, and our lawful basis
UK GDPR requires us to have a lawful basis for each use of your information.
We do not use your information for marketing, and we do not send marketing emails.
We do not routinely process special category information. Where a statutory payment such as sick pay requires health information, we process only what the law requires, as necessary to meet our obligations under employment law.
Who we share it with
We share personal information only where the service requires it: with HMRC; with the workplace pension scheme provider; with the recruitment agency or end client you work through; and with the providers who run our payroll software, banking, accountancy and IT.
We do not sell your personal information.
We aim to store and process personal information in the UK. Where a provider processes data outside the UK, we make sure a safeguard recognised by UK GDPR is in place, such as an adequacy regulation or the standard contractual clauses.
How long we keep it
We keep payroll, CIS and tax records for the periods HMRC requires, which can be up to six years after the end of the tax year they relate to. Right-to-work records are kept until two years after employment ends. Enquiries that do not lead to an engagement are deleted within twelve months.
How we keep it secure
Access to personal information is limited to the people who need it to do their job. Information is sent over encrypted connections and held in access-controlled systems. If we ever discovered a breach likely to put you at risk, we would tell you and the Information Commissioner's Office as the law requires.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete information, in certain circumstances
- ask us to restrict how we use it, in certain circumstances
- object to us using it where we rely on legitimate interests
- ask us to transfer it to another organisation, in certain circumstances
- withdraw consent at any time, where we rely on consent
Some of these rights do not apply where we are required by law to keep information, which is often the case with payroll and tax records.
To exercise any of these rights, contact us at contact@hiflexpartners.uk. We will respond within one month.
Complaints
If you are unhappy with how we have handled your personal information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office.
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk
Contact us about this notice
Email: contact@hiflexpartners.uk
Post: HiFlex Partners Ltd, Rainbow House, 10-12 Lumina Way, Enfield, EN1 1FS
Changes to this notice
We may update this notice. The date at the top shows when it was last changed.