Privacy Policy
Life In Ltd — trading as Life In People
Last updated: 26 October 2026
1. Introduction
Life In Ltd, trading as Life In People (“we”, “us” or “our”), is committed to protecting the privacy and security of personal information.
This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit our website, contact us, enquire about our services, engage us as a client, subscribe to our communications or otherwise interact with our business.
Life In People is the trading name under which we provide human resources consultancy, people management advice, HR documentation and related support to businesses and organisations. The legal entity responsible for these activities is Life In Ltd.
We process personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other relevant legislation.
Depending on the circumstances, we may act as a data controller, determining the purposes and means of processing personal data, or as a data processor when processing personal data on behalf of a client.
This Privacy Policy should be read alongside any relevant contractual terms, engagement documents and additional privacy information provided to individuals where appropriate.
2. Who we are
Legal company name: Life In Ltd
Trading name: Life In People
Company registration number: 17529456
Registered office: 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Email: info@lifeinpeople.com
Website: https://lifeinpeople.com
References to Life In People throughout this Privacy Policy refer to the services and business activities carried out by Life In Ltd under that trading name.
If you have any questions about this Privacy Policy or how we handle personal data, please contact us using the email address above.
3. Personal information we collect
The personal information we collect depends on the nature of your interaction with us and the services provided.
3.1 Information you provide to us
We may collect personal information when you contact us, submit an enquiry, request a quotation, subscribe to our newsletter, engage our services or communicate with us.
This information may include:
Your name, job title and professional role.
Business name and contact details.
Email address, telephone number and other correspondence details.
Information included in enquiries, feedback, forms and communications.
Details of the services you request or receive.
Contractual, billing and payment-related information.
Preferences relating to our services and communications.
3.2 Client and business information
When we provide consultancy services, we may collect and process information relating to our clients, their representatives, employees and other relevant individuals.
This may include:
Client organisation and business contact information.
Information required to understand a client's requirements.
Documents and correspondence supplied in connection with an engagement.
Information relevant to HR advice, policies, procedures and workplace matters.
Records of advice provided, work undertaken, decisions and agreed actions.
Information required for invoicing, accounting and contract administration.
3.3 Employee and HR-related information
As part of providing HR consultancy and advisory services, we may receive personal information about employees, workers, managers or other individuals connected with a client organisation.
Depending on the specific matter, this may include:
Names, job titles, departments and employment details.
Information about attendance, absence, performance or workplace conduct.
Information relating to employment concerns, complaints or disciplinary matters.
Relevant correspondence, statements, meeting notes and supporting documents.
Information about workplace adjustments or health-related circumstances where necessary.
Other information relevant to a specific HR enquiry or piece of work.
We seek to limit the information processed to what is relevant and necessary for the services being provided. We do not routinely maintain complete employee records for our clients unless this is expressly agreed as part of an engagement.
Clients remain responsible for ensuring that they have an appropriate legal basis and authority to share personal information with us.
3.4 Special category and criminal-offence information
In certain circumstances, information supplied to us may include special category personal data, such as information about an individual's health, or information relating to alleged or established criminal offences.
We will only process such information where it is necessary for the relevant purpose and where the applicable legal requirements and conditions for processing are satisfied.
Where required, we will take appropriate steps to ensure that the processing is properly authorised and that suitable safeguards are in place.
We do not seek to collect sensitive information that is unnecessary for the services being provided.
3.5 Information collected through our website
When you visit our website, certain technical information may be collected, depending on the website's configuration and the technologies in use.
This may include:
Internet Protocol (IP) address.
Browser type and version.
Device and operating system information.
Date, time and duration of visits.
Pages viewed and general website usage information.
Information relating to website security and performance.
The extent of this information depends on the technical features, cookies and other technologies operating on the website.
3.6 Newsletter and marketing information
If you subscribe to our newsletter or request marketing communications, we may collect your name, email address and communication preferences.
We may also maintain records of consent, subscription changes and unsubscribe requests. If we use email delivery or campaign analytics services, limited information about the delivery and interaction with our communications may be processed, depending on the service and settings used.
3.7 Payment and financial information
We may process information necessary to issue invoices, receive payments, maintain accounting records and manage our business finances.
This may include:
Client and billing contact details.
Invoice numbers, amounts and payment dates.
Transaction references and payment status.
Information required to reconcile payments and manage refunds or disputes.
We may accept payment by invoice and bank transfer and may introduce card payments or other payment methods in the future.
Where card payments are offered, a third-party payment provider may process the relevant payment information. We may use providers such as Stripe or other payment service providers in the future. Any such provider will process information in accordance with its own terms and privacy information.
We do not intend to store full payment card details ourselves.
4. How we collect personal information
We may collect personal information through the following means:
Directly from you when you contact us, submit an enquiry or engage our services.
From client organisations that instruct us to provide HR consultancy or related support.
From individuals involved in a matter on which we have been asked to advise.
Through business correspondence, meetings, telephone calls and other communications.
Through our website, subscription forms and other online interactions.
From professional advisers, service providers or other third parties where this is lawful and relevant to our work.
From publicly available sources where necessary for a legitimate business purpose.
Where personal information is provided to us by a client or another third party, that organisation or individual should ensure that they are entitled to share it with us and that appropriate information has been provided to the relevant individuals.
5. How and why we use personal information
We use personal information only where we have an appropriate purpose and lawful basis for doing so.
5.1 Responding to enquiries
We use contact and enquiry information to respond to questions, discuss requirements, provide quotations and explain our services.
The lawful basis will generally be taking steps at your request before entering into a contract or our legitimate interests in responding to business enquiries.
5.2 Providing our services
We use relevant information to deliver HR consultancy, provide advice, prepare documentation, communicate with clients and complete agreed work.
The lawful basis will generally be contractual necessity, our legitimate interests or another applicable lawful basis, depending on the circumstances.
Where we process personal information on behalf of a client, the client will generally determine the purposes and lawful basis for that processing. Our handling of the information will be governed by the relevant engagement and data processing arrangements.
5.3 Managing client relationships
We may use personal information to manage engagements, maintain correspondence, record agreed work, administer contracts and respond to questions or concerns.
The lawful basis will generally be contractual necessity or our legitimate interests in managing and developing our business.
5.4 Invoicing and payments
We use relevant information to issue invoices, receive and reconcile payments, manage outstanding balances, maintain financial records and deal with payment-related queries.
The lawful basis will generally be contractual necessity, compliance with legal obligations and, where applicable, our legitimate interests.
5.5 Business administration and legal obligations
We may process personal information to maintain business records, comply with applicable legal requirements, respond to lawful requests, establish or defend legal claims and protect our rights.
The lawful basis may include compliance with a legal obligation or our legitimate interests.
5.6 Website operation and security
We may use technical information to maintain website functionality, identify technical problems, protect against malicious activity and safeguard our systems.
Where applicable, the lawful basis will generally be our legitimate interests in operating and securing our website and business. Any use of non-essential cookies or similar technologies will be subject to applicable consent requirements.
5.7 Newsletters and marketing
We may use contact details to send newsletters, business updates and information about our services where permitted by applicable law.
Where consent is required, we will obtain it before sending the relevant communications. In other circumstances, we may rely on another lawful basis where permitted by law, including the rules governing electronic marketing.
You may unsubscribe from marketing communications at any time by using the unsubscribe facility provided or by contacting us directly.
5.8 Improving our services
We may use appropriate business information and feedback to review our services, improve our processes and understand client requirements.
Where practicable, we will use aggregated or anonymised information for analysis and reporting.
5.9 Sensitive information
Where special category or criminal-offence information is involved, we will identify and satisfy the additional legal requirements applicable to that information before processing it.
A general lawful basis alone is not sufficient where additional legal conditions apply.
6. Lawful bases for processing
Depending on the circumstances, we may rely on one or more of the following lawful bases under the UK GDPR:
Consent: where you have freely given permission for a specified purpose, such as certain marketing communications or optional cookies.
Contract: where processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
Legal obligation: where processing is necessary to comply with a legal obligation to which we are subject.
Legitimate interests: where processing is necessary for our legitimate business interests or those of a third party, provided that those interests are not overridden by your rights and interests.
Vital interests or public task: where relevant and applicable to the particular circumstances.
Where we process special category information, we must also satisfy an applicable condition under Article 9 of the UK GDPR and any additional requirements under relevant legislation. Where criminal-offence information is processed, we must satisfy the applicable requirements under Article 10 of the UK GDPR and the Data Protection Act 2018.
The lawful basis used will depend on the purpose and circumstances of the particular processing activity.
7. Sharing personal information
We do not sell personal information to third parties.
We may share personal information where necessary and lawful, including with the following categories of recipients.
7.1 Clients and relevant individuals
Where we provide HR consultancy services, we may share relevant information with the client organisation that instructed us and with authorised individuals involved in the matter, as necessary to deliver the agreed service.
The information shared will depend on the engagement and the role of the recipient.
7.2 Professional advisers
We may share relevant information with professional advisers, such as accountants, solicitors, insurers or other advisers, where necessary for legitimate business purposes, professional advice, insurance matters or legal proceedings.
7.3 Business and technical service providers
We may use third-party service providers to support our business operations. Depending on the services we use, these may include providers of email, website, document storage, IT support, communications, security, accounting and business administration services.
Such providers may process personal information on our behalf where necessary to provide their services. Where required, we will put appropriate contractual and security arrangements in place.
7.4 Payment service providers
If we introduce card payments or other third-party payment services, we may share the information necessary to process the transaction with the relevant payment provider.
This may include payment references, billing information and transaction details. The provider's own privacy policy will apply to the information it processes directly.
7.5 Public authorities and legal recipients
We may disclose personal information where required by law, court order or a lawful request from a competent authority, or where necessary to establish, exercise or defend legal claims.
7.6 Business transfers
If our business is involved in a merger, restructuring, sale or transfer of business assets, relevant information may be disclosed to appropriate parties where lawful and subject to suitable safeguards.
We will not disclose personal information to third parties for their independent marketing purposes without an appropriate legal basis.
8. International transfers
Some third-party providers may store or process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take steps to ensure that the transfer complies with applicable data protection law. Depending on the destination and circumstances, this may involve relying on UK adequacy regulations, an appropriate safeguard such as the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism.
Further information about relevant safeguards may be requested by contacting us.
9. How long we retain personal information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, contractual and reporting requirements.
Retention periods depend on the type of information, the nature of the engagement, applicable legal requirements and whether the information is needed to resolve a dispute or establish or defend a legal claim.
In general:
Enquiries: retained for a reasonable period after the enquiry has been dealt with, unless a longer period is necessary.
Client and contractual records: retained for the duration of the engagement and for an appropriate period afterwards.
HR-related information: retained only for as long as necessary for the relevant matter, in accordance with our agreement with the client and any applicable legal or contractual requirements.
Financial and accounting records: retained for the period required by applicable legal and tax obligations.
Newsletter information: retained until you unsubscribe or we determine that the information is no longer required, subject to any necessary suppression records.
Website and security records: retained for the period necessary for security, technical administration and any applicable legal requirements.
We may retain limited information for longer where necessary to comply with legal obligations, maintain records of consent or objections, resolve disputes or protect our legal rights.
When information is no longer required, we will take reasonable steps to delete it securely or anonymise it.
10. Data security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, destruction, alteration or disclosure.
These measures are intended to provide a level of security appropriate to the nature of the information and the risks associated with its processing.
Measures may include access controls, appropriate authentication, secure handling and transfer of documents, limiting access to information, and reviewing the suitability of service providers.
Where we process confidential employee information for clients, we recognise the importance of handling it carefully and limiting access to those who need it for the relevant work.
However, no method of transmitting or storing information can be guaranteed to be completely secure. If we become aware of a personal data breach, we will assess it and take any action required by applicable law.
11. Your data protection rights
Under applicable data protection law, you may have the following rights in relation to your personal information:
Right of access: to request confirmation of whether we process your personal information and obtain a copy of it.
Right to rectification: to request correction of inaccurate or incomplete information.
Right to erasure: to request deletion of personal information in certain circumstances.
Right to restriction: to request that we restrict processing in certain circumstances.
Right to data portability: to request certain information in a structured, commonly used and machine-readable format, where the legal conditions are met.
Right to object: to object to processing based on legitimate interests or to processing for direct marketing.
Rights relating to consent: where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
These rights are subject to legal conditions and exemptions. They may not apply in every circumstance, particularly where information must be retained to comply with legal obligations or where we are required to protect the rights of others.
To exercise your rights, please contact info@lifeinpeople.com. We may need to verify your identity before responding.
We will respond within the