Privacy Policy
Globoforce UK Limited (Company No. 06221304) — Squires House, 205a High Street, West Wickham, Kent, BR4 0PH
Globoforce UK Limited — Company Number 06221304, registered in England and Wales.
Registered Office: Squires House, 205a High Street, West Wickham, Kent, BR4 0PH.
Last updated: April 2026
1. Introduction and Data Controller Identity
This Privacy Policy explains how Globoforce UK Limited collects, uses, stores, and protects personal data in connection with our website at globoforceltd.co.uk and in the course of providing our software development and freelance placement services.
The data controller for all personal data processed under this policy is:
- Company Name: Globoforce UK Limited
- Company Number: 06221304
- Registered Address: Squires House, 205a High Street, West Wickham, Kent, BR4 0PH
- Email: info@globoforceltd.co.uk
- Mobile: 07853 194 431
We are committed to processing personal data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Categories of Personal Data We Collect
Depending on how you interact with Globoforce UK Limited, we may collect and process the following categories of personal data:
2.1 Enquiry and Contact Data
- Full name
- Email address
- Telephone number
- Company or organisation name
- The content of any message or enquiry submitted to us
2.2 Contract and Client Data
- Names and contact details of individuals within client organisations
- Correspondence and communications related to project delivery
- Financial information necessary for invoicing and payment processing
2.3 Freelance Developer and Candidate Data
- Name, contact details, and professional profile information
- CV and employment history
- Technical skills and qualifications
- Right to work documentation where applicable
2.4 Website Usage Data
- Browser type and version
- Pages visited and time spent on each page
- Referring URLs
- IP address (processed in anonymised or pseudonymised form where possible)
3. Lawful Basis for Processing
We rely on the following lawful bases under UK GDPR Article 6 for processing your personal data:
| Processing Activity | Lawful Basis |
|---|---|
| Responding to enquiries submitted via our contact form or by email | Legitimate interests (Article 6(1)(f)) — to communicate with prospective clients and partners |
| Delivering contracted software development or placement services | Contract performance (Article 6(1)(b)) — necessary to fulfil our contractual obligations |
| Invoicing and financial record-keeping | Legal obligation (Article 6(1)(c)) — Companies Act 2006 and HMRC requirements |
| Maintaining a freelance developer network | Legitimate interests (Article 6(1)(f)) — to maintain a pool of qualified candidates for placement |
| Website analytics and performance monitoring | Legitimate interests (Article 6(1)(f)) — to understand and improve our website |
4. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
- To respond to enquiries and provide information about our services
- To negotiate, establish, and fulfil contracts for software development and freelance placement services
- To manage ongoing client relationships and project communications
- To process payments and maintain financial records as required by law
- To manage our network of freelance developers and match candidates to relevant opportunities
- To improve the performance and usability of our website
- To comply with our legal and regulatory obligations
5. Cookies
Our website uses cookies. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:
- Strictly Necessary Cookies: These are essential for the website to function. They enable core functionality such as security and session management and cannot be disabled.
- Performance Cookies: These help us understand how visitors use our website by collecting anonymous usage data, enabling us to improve user experience.
- Functionality Cookies: These remember your preferences (such as cookie consent choices) to provide a more personalised experience.
When you first visit our website, you are presented with a cookie notice. You may accept or decline non-essential cookies at that time. For full details of the cookies we use, please see our Cookie Policy.
6. Data Sharing and Third-Party Recipients
Globoforce UK Limited does not sell personal data to third parties. We may share personal data in the following limited circumstances:
- Service Providers: We use third-party services for website hosting, email, and analytics. These providers act as data processors and are contractually bound to process data only on our documented instructions and in accordance with applicable data protection law.
- Client Organisations: Where we place a freelance developer, we share relevant professional profile information with the client organisation as part of the placement process, with the candidate's knowledge and consent.
- Legal and Regulatory Bodies: We may disclose personal data where required to do so by law, court order, or regulatory requirement, including to HMRC or Companies House in fulfilment of our statutory obligations.
- Professional Advisors: We may share data with our legal advisors, accountants, or insurers where necessary for the conduct of our business.
7. Data Retention
We retain personal data for as long as necessary for the purposes for which it was collected, subject to the following retention periods:
| Data Category | Retention Period |
|---|---|
| Enquiry and contact form submissions | 24 months from the date of the enquiry, unless a client relationship is established |
| Client and contract records | 7 years from the end of the contractual relationship, in accordance with HMRC requirements |
| Financial records and invoices | 7 years from the date of the financial transaction |
| Freelance developer profiles (active network) | While the individual remains part of our active network, reviewed annually |
| Website analytics data | 26 months from collection (or as configured in our analytics provider settings) |
At the end of the applicable retention period, personal data is securely deleted or anonymised.
8. International Data Transfers
Globoforce UK Limited operates primarily within the United Kingdom. Where we use third-party service providers whose infrastructure is located outside the UK (including within the European Economic Area or other third countries), we ensure that any such transfer is subject to appropriate safeguards in accordance with UK GDPR, including adequacy decisions or Standard Contractual Clauses as applicable. Where third-party processors are used, we review their data protection arrangements before engagement.
9. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of Access: You may request a copy of the personal data we hold about you (a Subject Access Request).
- Right to Rectification: You may request that we correct inaccurate or incomplete personal data.
- Right to Erasure: You may request that we delete your personal data where there is no legitimate reason for us to continue processing it.
- Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances.
- Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a portable, machine-readable format.
- Right to Object: Where we rely on legitimate interests as our lawful basis, you have the right to object to our processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise any of these rights, please contact us at info@globoforceltd.co.uk or in writing to our registered address. We will respond within one calendar month.
10. Automated Decision-Making and Profiling
Globoforce UK Limited does not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Decisions regarding client engagements, freelance placements, and any other matters are made by human judgement.
11. Data Security
We take the security of personal data seriously. We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures are reviewed and updated as necessary. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach, as required by UK GDPR.
12. Complaints to the Information Commissioner's Office
If you believe that Globoforce UK Limited has processed your personal data in a manner that does not comply with applicable data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Website: ico.org.uk
- Helpline: 0303 123 1113
We would, however, welcome the opportunity to address your concerns directly before you approach the ICO, and encourage you to contact us in the first instance.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. The updated policy will be published on this page with a revised “last updated” date. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or about how Globoforce UK Limited processes your personal data, please contact us at:
- Email: info@globoforceltd.co.uk
- Mobile: 07853 194 431
- Post: Globoforce UK Limited, Squires House, 205a High Street, West Wickham, Kent, BR4 0PH