Website & business privacy notice

ICO registration: ZC266987. Registered 5 October 2026; expires 4 October 2027. View registration certificate (PDF). Registration records payment of the data-protection fee; it is not ICO approval or certification of our services.

Who we are

Antonio Solinas trading as SolinasHR is the controller for the business and website processing described in this notice.

Email: [email protected]

Telephone: 07795 068462

Website: https://solinashr.com

Privacy contact: Antonio Solinas at [email protected]

Antonio Solinas is the privacy lead. SolinasHR has not appointed a statutory Data Protection Officer. Correspondence address: Unit 173919, PO Box 6945, London, W1A 6US.

Personal information we use and why

Information you need to provide

Providing enquiry information is normally voluntary, but SolinasHR may be unable to respond or assess service fit without enough contact and requirement information. If you enter into an engagement, certain identity, authority, instruction and billing details are required to establish and manage the contract and to meet legal or accountability duties. We do not use a refusal to provide optional marketing information to deny a service.

Where information comes from

We obtain information directly from you or your organisation, through meetings and correspondence, and from records created while delivering services. For targeted business development we may use public business sources such as company websites, Companies House, professional networking pages, public directories and other clearly business-focused sources. We do not knowingly buy consumer marketing lists.

When we obtain personal information from another source and use it to contact a named business contact, we provide or link to this privacy information no later than the first communication, and record the source used.

Direct marketing and your right to object

SolinasHR may make limited, targeted business-to-business contact about services where this is lawful and reasonable. Electronic marketing and live calls are carried out in accordance with applicable PECR rules. Before unsolicited live marketing calls, SolinasHR screens the number against the TPS and CTPS where required and its own suppression list.

You can object to direct marketing at any time. Email [email protected] or tell us during a call. We will stop the marketing and keep only the minimum suppression information needed to make sure your objection is respected.

Sensitive information and client workforce data

For client employee and payroll data handled solely on documented client instructions, the client normally acts as controller and SolinasHR acts as processor under a written agreement. This notice covers SolinasHR’s own website and business processing.

Please do not send employee payroll files, bank details, health information, equality data, disciplinary information, criminal-offence information or other sensitive workforce information through a general website enquiry or ordinary prospecting email. Where such information is genuinely required for an agreed client service, it must be handled through the approved client system or secure transfer route under documented instructions.

If SolinasHR acts as controller for any special-category or criminal-offence information, it will identify the required Article 6 basis and any applicable Article 9, Article 10 or Data Protection Act 2018 condition before processing.

Who we share information with

We share personal information only where necessary with service providers that support website delivery, email, document storage, security, accounting/payment administration and professional advice; with regulators, courts or authorities where required; and with advisers or a purchaser in a genuine business reorganisation under appropriate confidentiality. We do not sell personal information.

Where a supplier acts as a processor, SolinasHR uses an appropriate contract and reviews the supplier according to the risk and type of information involved. Client workforce data is not placed with a SolinasHR subprocessor unless the client has given the required authorisation.

International transfers

Our technology suppliers may process personal information outside the UK, including in the United States. Cloudflare’s published Data Processing Addendum provides for the UK extension to the Data Privacy Framework where applicable and SCCs with the UK Addendum for restricted transfers. Google’s applicable business data-protection terms provide transfer provisions for the configured services. You can request information or copies of applicable safeguards from [email protected], subject to necessary redactions. The relevant supplier terms and service settings must match the processing described here.

How long we keep information

Hosting traffic statistics

Cloudflare handles connection information, including IP addresses and request details, when delivering and protecting this website. We use its aggregate hosting reports, such as request totals, bandwidth, country and estimated visitor counts, to understand overall use and improve the website. This uses ordinary server-side request information, without adding analytics cookies, browser tracking code or visitor profiles. IP addresses can be personal data; the underlying processing is not described as anonymous. Our basis for this use is legitimate interests in operating and improving the website. You can object by contacting [email protected]. Hosting records are retained for the operational period set by Cloudflare, unless needed longer for a security incident or legal claim.

Cookies and analytics

We remember your privacy choice for 180 days. With Analytics consent, Cloudflare Web Analytics receives page/referrer information, country, browser/device details and performance measurements to help us understand visits and improve the website. It uses no cookies or local storage and does not track people across websites. Cloudflare says it discards incoming IP addresses at the nearest data centre rather than storing them in its core analytics databases or logs. Reports for the previous six months are available. With separate Advertising consent, Google Ads receives page, browser/device and ad-click information for advertising measurement and attribution. Consent is the basis for these optional activities. Google Analytics is not enabled. Lead-conversion events, remarketing, personalised advertising and enhanced conversions are not configured by this website code. You can withdraw either choice through Cookie settings. See our Cookies page for details.

Security

SolinasHR uses proportionate technical and organisational controls including access restrictions, supported devices, encryption where appropriate, multi-factor authentication, secure transfer methods, supplier checks, incident procedures and deletion controls. No internet service is completely secure, so workforce or other sensitive information must use the agreed secure channel rather than a general website enquiry or ordinary email unless specifically approved.

Your information rights

Right to object: You can object to direct marketing at any time; we will stop it. You can also object on grounds relating to your situation to processing based on legitimate interests. Contact [email protected].

Depending on the circumstances, you may have rights of access, correction, erasure, restriction, objection and portability. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. You may also have safeguards in relation to significant decisions based solely on automated processing. Rights can be limited by law and depend on the lawful basis and circumstances.

To exercise a right, email [email protected]. We may ask for proportionate information to confirm identity and locate the relevant records. We normally respond within one month. Where SolinasHR is only a processor for a client, we will pass the request promptly to that client and assist as required.

Automated decision-making

SolinasHR does not currently make decisions about individuals that have legal or similarly significant effects based solely on automated processing. If this changes, SolinasHR will update its records and privacy information and apply the safeguards required by current UK data-protection law, including appropriate information, the ability to make representations, human intervention where required, and a way to contest the decision.

Data-protection complaints and the ICO

You can make a data-protection complaint to SolinasHR at [email protected], using the subject 'Data Protection Complaint', or by another reasonable contact method. We will acknowledge it within 30 days and investigate, keep you informed and provide an outcome without undue delay. You also have the right to complain directly to the ICO at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113. You do not need to wait for our process before contacting the ICO.

Children

The SolinasHR website and business-development activity are aimed at organisations and adult professional contacts, not children. Do not submit children's information through the website. Any client assignment that legitimately involves a young worker or dependant must be handled only under documented client instructions and appropriate safeguards.

Changes to this notice

We review this notice at least annually and whenever services, suppliers, law or guidance change materially. The current version and effective date are shown at the top of the notice. Material new uses of personal information will be brought to relevant people's attention before the new processing starts where required.

Google and website providers

Cloudflare supports website hosting, security and the server-side traffic reports described above. Its separate Web Analytics browser beacon loads only when you allow Analytics. When you allow Advertising, Google receives advertising measurement data. Google may process it outside the UK under its applicable data-protection terms and transfer safeguards. See Google’s Privacy Policy and Google’s business privacy information. We do not send enquiry text, payroll files or contact details to Google through this integration. External social links and email links open separate services governed by their own notices.

Tracking records and withdrawal

Your browser stores your chosen categories, a random consent receipt ID, your action, the notice version and the time of your latest choice for 180 days. This release does not send a separate consent receipt to a SolinasHR server. On withdrawal, the site sends a denial update to an already loaded Google tag, removes accessible first-party cookies for the withdrawn purpose and reloads to unload optional scripts, including Cloudflare Analytics. Withdrawal does not make earlier processing unlawful, but we will handle deletion and recipient-notification obligations for identifiable personal data collected under that consent. Contact us if you want help exercising these rights; where we cannot identify you from aggregate reports, we will explain the limits.

Cloudflare makes the previous six months of analytics reports available; this is not a promise that all provider records are erased after six months. Google Ads retention depends on the service and settings; see Google’s advertising information. Cookie expiry and provider-held data retention are different.