1. Introduction
Outsource-247 (“we,” “us,” “our”) is committed to protecting your privacy. This policy explains how we collect, use, store, and protect personal data when you visit our website, engage our services, apply for a role, or otherwise interact with us.

2. Who We Are
Outsource-247 is [company registration details, registered address, company number]. If you have any questions about this policy or how we handle your data, contact us at [privacy email address].

3. What Data We Collect
Depending on how you interact with us, we may collect:
Contact details (name, email address, phone number, company name)

• Information submitted through contact, enquiry, or partnership forms

• Job application details (CV, work history, references) for Academy or recruitment enquiries

• Website usage data (pages visited, time on site, browser/device type) via cookies and analytics tools

• Communications you send us (emails, call notes, meeting records)

• For client engagements: business and financial information necessary to deliver our accounting, bookkeeping, payroll, MTD, EOR, or staffing services

4. How We Collect It
We collect data when you:

• Fill out a form on our website (contact, discovery call booking, Academy enrolment, partnership enquiry)

• Apply for a role or the Academy

• Correspond with us directly

• Browse our website (via cookies and analytics — see Section 9)

• Engage us as a client, during which we may receive data via your systems, software, or direct file transfer

5. Why We Collect It (Legal Basis)
Under UK GDPR, we rely on the following legal bases:

• Consent — for marketing communications and non-essential cookies

• Contract — to deliver services you’ve engaged us for, or to process a job/Academy application

• Legitimate interest — to respond to enquiries, improve our website, and maintain business relationships

• Legal obligation — where required for compliance, tax, or employment law purposes

6. How We Use Your Data
We use personal data to:

• Respond to enquiries and discovery call requests

• Deliver our services (MTD support, EOR, staffing, payroll, bookkeeping)

• Process Academy applications and enrolments

• Administer employment or contractor relationships (where we act as Employer of Record)

• Send marketing communications, where you’ve opted in

• Improve our website and services through analytics

7. Who We Share It With
We may share data with:

• Trusted third-party service providers (hosting, email, CRM, payroll, and accounting software providers) who process data on our behalf under data processing agreements

• Regulatory or tax authorities, where legally required

• Our offshore delivery teams, where necessary to provide contracted services

International Data Transfers: As part of our service delivery model, personal and business data may be transferred to, and processed in, jurisdictions outside the UK — including Zimbabwe — where our accounting and bookkeeping teams are based. Where this occurs, we put appropriate safeguards in place in line with UK GDPR requirements for international transfers, such as [Standard Contractual Clauses / adequacy considerations — confirm actual mechanism with legal counsel]. We do not transfer data internationally without ensuring an appropriate level of protection is in place.

8. How Long We Keep Data
We retain personal data only as long as necessary for the purposes it was collected — typically for the duration of a client relationship plus [X years] to meet legal, tax, or contractual obligations, after which it is securely deleted or anonymised.

9. Cookies
Our website uses cookies to improve functionality and understand how visitors use the site. This may include:

• Essential cookies (required for the site to function)

• Analytics cookies (to understand visitor behaviour)

• Marketing cookies (if applicable, e.g. for retargeting)

You can manage or disable cookies through your browser settings. [Add a cookie consent banner reference/link to a full cookie policy if you’re running one separately.]

10. Your Rights
Under UK GDPR, you have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data (“right to be forgotten”)

• Object to or restrict certain processing

• Request data portability

• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at [privacy email address].

11. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse — including secure systems, access controls, and staff training on data protection.

12. Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page with an updated “last updated” date.

13. Complaints
If you’re unhappy with how we’ve handled your data, you can contact us directly at [privacy email address]. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

14. Contact Us
For any questions about this policy or your data:
[Email address]
[Postal address, if applicable]

A few things to fill in or confirm before publishing:

• Company registration number and registered address

• Actual retention periods (varies by data type — client financial records often need 6+ years for HMRC purposes)

• Your specific international transfer safeguard mechanism (this is the section I’d most want a solicitor’s eyes on, given you’re processing UK client financial data offshore)

• Whether you’re running a cookie consent banner — if so, this policy should reference it directly