PRIVACY AND COOKIES POLICY

smile made out of red dots

General Privacy Policy for Ergofy Limited t/a Workhappy

heptagon made out of orange dotswhite pentagonorange outlined abstract shapewhite triangleorange smile shapeorange smile shapeyellow smile shape
Last updated: November 2024

ERGOFY LIMITED (trading as WORKHAPPY) ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy and Cookies Policy explains how we collect, use, and disclose your personal data when you visit our website https://workhappy.uk ("Website") or interact with us through the Website. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

1. Information About Us

ERGOFY LIMITED (trading as WORKHAPPY) is a company incorporated and registered in England and Wales with company number 10307064. Our registered office is at 47 Southgate St, Winchester SO23 9EH.For data protection queries, please contact our Data Protection Officer:

For general inquiries, please contact:

We respect your right to privacy and will only process personal information in accordance with applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

2. Personal Data We Collect We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

2.1 Identity and Contact Data

  • Data Collected: Name, email address, telephone number.
  • How Collected: When you fill out forms on our Website to make inquiries.
  • Purpose: To respond to your inquiries and provide you with information about our services.
  • Lawful Basis for Processing: Legitimate Interests. We have a legitimate interest in communicating with individuals who have expressed interest in our services.

2.2 Technical Data

  • Data Collected: IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform.
  • How Collected: Automatically through cookies and similar technologies when you use our Website.
  • Purpose: To administer and protect our Website, deliver relevant content, and understand how visitors use our Website.
  • Lawful Basis for Processing: Consent. We obtain your consent for non-essential cookies through our cookie consent banner managed by CookieYes.

2.3 Usage Data

  • Data Collected: Information about how you use our Website.
  • How Collected: Through cookies and similar technologies.
  • Purpose: To improve our Website and services based on how users interact with them.
  • Lawful Basis for Processing: Consent.

2.4 Marketing and Communications Data

  • Data Collected: Your preferences in receiving marketing from us and your communication preferences.
  • How Collected: When you opt-in to receive marketing communications.
  • Purpose: To send you updates and promotional materials about our services.
  • Lawful Basis for Processing: Consent.

Sensitive Personal Data We do not actively collect sensitive personal data (special category data) such as health information through our Website. However, if you voluntarily provide such information in your communications with us, we will handle it confidentially and in accordance with data protection laws.

  • Lawful Basis for Processing: Consent. By voluntarily providing this information, you consent to our processing of it solely to address your inquiry.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. We use your personal data for the following purposes:

  • To Respond to Inquiries: To communicate with you and respond to your requests or questions.
  • To Improve Our Website: To administer and improve our Website, including troubleshooting, data analysis, testing, and statistical purposes.
  • Marketing: To provide you with updates and promotional materials about our services if you have consented to receive such communications.
  • Security: To keep our Website safe and secure.

4. Cookies and Data Collection

Our Website uses cookies and similar technologies to distinguish you from other users and to improve your experience.

4.1 Managing Cookies

We use CookieYes to manage user consent for cookies. You can manage your cookie preferences at any time using the cookie consent banner on our Website.

4.2 Cookies Used on Our Website

The third-party cookies we use are:

  • Google Analytics: We use Google Analytics, a web analytics service provided by Google, Inc., to help us analyse how users interact with our Website and count the number of visitors. This data is collected anonymously and helps us improve our Website's functionality and user experience. Google Analytics also anonymises your IP address and does not associate it with any personally identifiable information.
  • Google Ads: Google Ads cookies allow us to collect information about how visitors use our Website. This data is gathered anonymously and helps make our marketing communications more relevant and improve the effectiveness of our advertising campaigns.
  • Microsoft Clarity: We use Microsoft Clarity to gain insights into how users interact with our Website. Clarity cookies track mouse movements, clicks, and scrolling behaviour, which helps us understand user engagement with our content. This data allows us to enhance the overall user experience on our Website.
  • Microsoft Bing Ads: Microsoft Bing Ads cookies are used to track conversions and user interactions. They help us optimise our advertising efforts by collecting data on how visitors use our Website.
  • HubSpot: HubSpot cookies help us track Website visitors and analyse usage data. The information collected includes IP addresses, pages visited, and time spent on the Website. This data enables us to improve our Website's functionality and manage our customer relationships more effectively.
  • LinkedIn Ads: LinkedIn Ads cookies allow us to track conversions and deliver targeted advertisements to users who have visited our Website. The information collected helps us tailor relevant ads and refine our marketing strategies.
  • Cloudflare: Cloudflare cookies are used to enhance the security and performance of our Website. These cookies help identify trusted web traffic and protect the Website from malicious visitors.
  • CookieYes: We use CookieYes to manage user consent for cookies. CookieYes stores your preferences regarding cookie usage, ensuring that your choices are respected on subsequent visits to our Website.

Please note that third-party cookies are set by external services we use, such as Google Analytics, Google Ads, Microsoft Clarity, Microsoft Bing Ads, HubSpot, LinkedIn Ads, Cloudflare, and CookieYes.

4.3 Personal Data Collected via Cookies

Through these cookies, we may collect personal data such as IP addresses, browsing behaviour, and device information. This information is used to analyse the performance of our Website, deliver relevant content, and improve our services. All data collected via cookies is processed in accordance with this Privacy and Cookies Policy.

5. Disclosure of Your Personal Data

We may share your personal data with the following third parties:

5.1 Service Providers

  • Analytics and Marketing Services: Companies like HubSpot, Google Analytics, Microsoft Clarity, Microsoft Bing Ads, and LinkedIn Ads help us analyse Website usage, improve our marketing efforts, and deliver relevant advertisements.
  • IT and System Administration Services: Providers that assist with Website hosting, maintenance, and security, such as Cloudflare.

5.2 Legal Obligations

  • Compliance with Laws: We may disclose your personal data to comply with legal obligations, respond to legal claims, or protect the rights, property, or safety of our company, employees, customers, or others.

We do not share your personal data with any group companies, as we do not have any parent, subsidiary, or affiliated companies.

6. International Data Transfers

Some of our service providers are based outside the UK or the European Economic Area (EEA), so their processing of your personal data will involve a transfer outside these regions.

6.1 Safeguards in Place

Whenever we transfer your personal data out of the UK or EEA, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

  • Standard Contractual Clauses (SCCs): We use SCCs approved by the UK Information Commissioner's Office (ICO), which give personal data the same protection it has in the UK.
  • Data Processing Agreements (DPAs): We have agreements in place with our service providers that include data protection obligations.

For example, Google, HubSpot, and other service providers have incorporated SCCs and DPAs into their terms to ensure compliance with data protection laws.

7. Data Security

We have implemented appropriate technical and organizational measures to protect your personal data, including:

  • Encryption: Secure transmission of data using SSL/TLS protocols.
  • Access Controls: Limiting access to personal data to authorized personnel only.
  • Firewalls and Antivirus Software: Protecting our systems from unauthorized access.
  • Regular Security Assessments: Monitoring and testing our security measures.
  • Staff Training: Ensuring employees are trained on data protection responsibilities.
  • Confidentiality Agreements: Requiring staff and contractors to sign confidentiality agreements.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

  • Contact Information: Retained for up to 7 years after your last interaction with us.
  • Inquiry Data: Kept for 7 years to assist with future communications or services.

We regularly review the personal data we hold and securely delete or anonymize it when it is no longer needed.

9. Your Rights

Under data protection laws, you have rights regarding your personal data:

  • Access: Request access to your personal data.
  • Correction: Request correction of incomplete or inaccurate data.
  • Erasure: Request deletion of your personal data when there is no good reason for us to continue processing it.
  • Object: Object to processing of your personal data where we rely on legitimate interests.
  • Restriction: Request restriction of processing of your personal data.
  • Data Portability: Request the transfer of your personal data to you or a third party.
  • Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your personal data.

Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at dataprotection@workhappy.uk. We may need to verify your identity to process your request.We will respond to all legitimate requests within one month. Occasionally, it may take us longer than a month if your request is particularly complex.

Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated:

10. Third-Party Links

Our Website may contain links to third-party websites, plugins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

11. Children's Data

Our Website and services are not intended for children under the age of 13. We do not knowingly collect personal data from children. If you believe we may have collected information from a child under 13, please contact us, and we will take appropriate measures to delete such information.

12. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling in relation to your personal data.

13. Changes to This Policy

We may update this Privacy and Cookies Policy from time to time. Any changes will be posted on this page with an updated revision date. If we make significant changes, we will notify you via a notice on our Website.

14. Contact Us

If you have any questions about this Privacy and Cookies Policy or our data protection practices, please contact: