Privacy Policy

OrgXcel Ltd (“we”, “us”, or “our”) is committed to protecting the privacy of both our website users and our consultancy clients. This Privacy Policy explains how we collect, use, and safeguard your personal data, whether through our website at https://www.orgxcel.com or in the course of delivering our HR consultancy services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

OrgXcel Ltd
Registered in England and Wales
Website: https://www.orgxcel.com
Email: info@orgxcel.com

2. What Data We Collect

A. From Website Users

When you interact with our website, we may collect:

• Comments: name, email, IP address, browser user agent
• Cookies (e.g. login info, screen preferences, post-edit history)
• Media uploads (avoid uploading images with EXIF/GPS data)
• Embedded content may collect data via third-party tools (e.g. YouTube)

We may also collect anonymised tracking or analytics data.

B. From Clients and Their Representatives

As part of our HR consultancy work, we may collect:

• Client contact details (e.g. name, email, phone, company info)
• Project-related information and communications
• Employee data shared by clients for project delivery (e.g. job roles, HR records)

We do not collect or store sensitive financial data like payment card details.
However, if clients pay via bank transfer, we may passively receive their bank details via transaction records. We do not actively collect or store this information.

3. How We Collect Data

We collect personal data through:

• Website interactions (e.g. comments, cookies, contact forms)
• Emails and calls from prospective and current clients
• Secure file sharing tools or encrypted cloud storage platforms
• Onboarding processes and contractual correspondence

4. Cookies and Embedded Content

Our website uses cookies to enhance user experience. These include:

• Session and login cookies
• Screen preference cookies
• Comments-related cookies
• Post-editing cookies

You can manage cookies via your browser settings.

Articles may include embedded content (e.g. videos, articles). These behave as if you visited the source site directly, which may collect data, use cookies, or track your interactions.

5. Why We Use Personal Data

We process personal data for the following purposes:

• To provide HR consultancy services to our clients
• To manage contracts and communication
• To meet legal obligations (e.g. accounting, recordkeeping)
• To maintain and improve our website and services
• To respond to client or visitor enquiries

Our lawful bases include: contractual necessity, legitimate interests, and legal obligations.

6. Who We Share Data With

We do not sell or share data with advertisers or unrelated third parties.

We may share data with:

• Our cloud-based accounting software, which stores client contact details for invoicing and recordkeeping
• Our accountant, who accesses this data for tax and compliance purposes
• Our bank, which may hold transaction information that includes client names or references
• Our encrypted cloud storage platform, used for secure sharing of sensitive project data with clients
• Spam detection services, for website comment moderation

7. International Data Transfers

We store data on secure platforms located in the UK and EEA. Occasionally, data may be accessed while travelling within these regions. We ensure all data transfers are compliant with UK GDPR.

8. How Long We Retain Data

• Website comments: retained indefinitely
• Client data (for accounting): kept for up to 6 years
• Employee or project-specific data: retained only as long as needed, typically deleted within 6 months after project completion unless otherwise agreed
• Media or uploads: retained as long as content remains online

9. Your Rights

Under the UK GDPR, you have the right to:

• Access your personal data
• Request correction or deletion
• Object to or restrict certain processing
• Withdraw consent (where applicable)
• Lodge a complaint with the ICO: https://ico.org.uk

To exercise these rights, contact: info@orgxcel.com

10. How We Protect Your Data

We use appropriate technical and organisational measures:

• Encrypted cloud storage and secure file sharing
• Password-protected files and devices
• Access controls based on roles
• Secure deletion practices

11. Policy Updates

We may update this Privacy Policy to reflect changes in law or business practices. The most current version will always be available at:
https://www.orgxcel.com/privacy-policy