Tiro Associates Privacy Policy

Last reviewed and updated: 24th January 2025.

We are committed to the privacy and confidentiality of the information provided by you to us. We ask you to periodically review this page alongside our Terms & Conditions, as it may change from time to time. If something is unclear, please contact us.

Please note: Where Tiro is mentioned throughout the following policy, this represents Tiro Associates Ltd.

1. Who we are

We are Tiro Associates Ltd trading as Tiro. Our registered in England & Wales No. is: 03884171.

Tiro Associates Ltd brand(s) include Tiro Associates.

Our website address(es) are: https://tiroassociates.com/.

Our address(es) are:

Trading Address: 7 The Chequers, High Street, Ingatestone, Essex, CM4 0DG.

Registered Office: 7 The Chequers, High Street, Ingatestone, Essex, CM4 0DG

Tiro is owned and operated by Nichola Hedges. The digital landscape – including this website and social accounts – is owned by Nichola Hedges and managed by Beyond Co.

References to “the Company,” “we,” “us,” “our,” and “ours” (or other relevant terms) in this privacy policy mean Tiro.

The terms “you,” “your,” and “yours” (or other relevant terms) when used in this privacy policy mean any user of this website, prospective employees of Tiro, clients, partners, vendors, suppliers, and other internal and external stakeholders.

2. Purpose of this privacy policy

If you submit personal data to us, it will be maintained in accordance with the provisions of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (together, “the Data Protection Legislation”).

Personal data (as defined in the Data Protection Legislation) means any information which identifies you and may include information such as your name, email address, telephone number, position, and postal address.

We will take reasonable technical and organisational precautions to prevent the loss, misuse, or alteration of your personal data.

3. Notification of changes to the privacy policy

We are continually improving our methods of communication and adding new functionality and features to this website and to our existing services. Because of these ongoing changes, changes in the law, and the changing nature of technology, our data protection practices will change from time to time. If and when our data protection practices change, we will update this privacy statement to describe our new practices. We encourage you to check this page regularly.

4. Our use of your personal data

When you provide us with your personal data, it may be used for the following purposes:

To carry out our obligations arising from any contracts we have with you.
To contact you to inform you of new services and events we will be providing.
To send you requested information about our services – we will keep your contact details on our database and may, from time to time, email you information about services which may be of interest to you. If you do not wish to receive emails from us for these purposes, please let us know by emailing recruit@tiroassociates.com.
To use your personal data for marketing purposes.

We may also receive information about you from other sources (with your consent), and we may combine this information with the information you give to us. We may use this information and the combined information for the purposes set out above.

For Recruitment Services:

Tiro is a recruitment business that provides work-finding services to its clients and work-seekers. The Company must process personal data (including sensitive personal data) so that it can provide these services – in doing so, the Company acts as a data controller.

You may give your personal details to the Company directly, such as on an application or registration form or via our website, or we may collect them from another source, such as a jobs board. The Company must have a legal basis for processing your personal data. For the purposes of providing you with work-finding services and/or information relating to roles relevant to you, we will only use your personal data in accordance with this privacy statement. At all times, we will comply with current data protection laws.

5. Anonymous data collected through this website

In addition to the information we collect as described above, we use technology to collect anonymous information about the use of our website. For example, our web server automatically logs which pages of our website our visitors view, their IP addresses, and which web browsers they use. This technology does not personally identify you – it simply enables us to compile statistics about our visitors and their use of our website. Our website contains hyperlinks to other pages on our website. We may use technology to track how often these links are used and which pages on our website our visitors choose to view. Again, this technology does not identify you personally – it simply enables us to compile statistics about the use of these hyperlinks.

6. Cookies and similar technologies

In order to collect the anonymous data described in the preceding paragraph, we may use cookie technology on our website. A cookie is a small piece of information which is sent to your browser and stored on your computer’s hard drive, mobile phone, or other devices. Cookies do not damage your computer. You can set your browser to notify you when you receive a cookie. This enables you to decide if you want to accept it or not. However, some of the services and features offered through our website may not function properly if your cookies are disabled.

Strictly necessary cookies: These cookies are essential in order to enable you to move around the website and use its features. Without these cookies, the services you have asked for cannot be provided. They are deleted when you close the browser.
Performance cookies (e.g. Google Analytics): These cookies collect information in an anonymous form about how visitors use our website. They allow us to recognise and count the number of visitors and to see how visitors move around the site when they are using it.

We may also use your IP address to help diagnose problems with our server, to administer our website, and to improve the service we offer to you. An IP address is a numeric code that identifies your computer on a network, or in this case, the internet. Your IP address might also be used to gather broad demographic information. We may perform IP lookups to determine which domain you are coming from (i.e., google.com, yourcompany.com) to gauge our users’ demographics more accurately. Information from these types of cookies and technologies or about website usage is not combined with information about you from any other source. None of the cookies or technologies that we use will personally identify you.

7. Analytics and similar technology

As mentioned above in Section 6, we use a selected amount of analytical tools in order to best optimise this site. Alongside RankMath, we use a number of Google applications, including but not limited to Google Analytics, Google Ads, Google Search Console, and a number of Google APIs, such as Google Job Search schema.

8. Consent

To comply with current legislation, we need to ask for your consent to set the performance cookies described above. When you arrive on our website, a banner will appear asking for your consent to place performance cookies on your device. This website is tested regularly to ensure the cookie banner performs as it should, however, there may be various factors that could potentially temporarily affect this, including but not limited to conflicts from the CMS, plugins, themes, server-side, cache issues, updates, and external factors such as the device(s) you’re using. If you, another user of your device, or anyone else you know experiences issues with this, we ask you to contact us immediately so that we can rectify it.

When ‘Accept,’ ‘Agree,’ ‘I’m fine with this,’ ‘Okay’ or ‘OK’ (or other relevant terms) aren’t presented, by clicking on the banner, anywhere else on the screen, or by continuing to use our website, we assume that you consent to cookies being placed on your device. This also applies if there isn’t a ‘Manage your options,’ ‘Manage,’ ‘Custom Settings’ (or other relevant terms) option as well. If you do not agree, please leave our website immediately. Once your consent has been provided, this message may not appear again when you revisit. If you, or another user of your device, wish to withdraw your consent at any time, you can do so by altering your browser settings.

9. Retention of your personal data

We will only keep your personal data within the timeframes allowed by law and for as long as is necessary to comply with industry obligations.

For Recruitment Services:

The Company will retain your personal data only for as long as is necessary for the purpose we collect it. Different laws may also require us to keep different data for different periods of time. For example, the Conduct of Employment Agencies and Employment Businesses Regulations 2003 require us to keep work-seeker records for at least one year from (a) the date of their creation or (b) after the date on which we last provide you with work-finding services.

We must also keep your payroll records, holiday pay, sick pay, and pensions auto-enrolment records for as long as is legally required by HMRC and associated national minimum wage, social security, and tax legislation. This is currently 3 to 6 years.

Where the Company has obtained your consent to process your personal data, we will do so in line with our retention policy, a copy of which can be requested by sending an email to recruit@tiroassociates.com. Upon expiry of that period, the Company will seek further consent from you. Where consent is not granted, the Company will cease to process your personal data.

10. Disclosure of your personal data

We do not share, sell, or distribute your personal data with unrelated third parties, except as otherwise provided for in this privacy policy and under these limited circumstances:

When the law requires it.
In order to provide you with the information or services that you have requested, your personal information may occasionally be transferred or shared with third parties who act for us for further processing in accordance with the purposes for which the data was originally collected or for the purposes to which you have subsequently consented. For example, we may allow third-party access to your personal data to support our information technology or to handle mailings on our behalf.
Where you have consented, we may share your personal data with other companies whose products and services may be of interest to you.
Where you are a client, we may disclose your personal data to third parties for the purposes of billing and debt collection.

For Recruitment Services:

The Company will process your personal data and/or sensitive personal data with the following recipients:

Clients (whom we may introduce or supply you to)
Former employers whom we may seek references from
Payroll service providers who manage payroll on our behalf or other payment intermediaries whom we may introduce you to

11. Transfer of your personal data outside the UK

The personal data collected from you may be transferred outside the UK either by Tiro and/or any of the third parties described above. By providing personal data, you agree your data may be transferred outside the UK in such circumstances.

While some of these countries may not offer the degree of protection to your personal data equivalent to that afforded by your country of residence, we will take all reasonable steps to ensure the security of data held and processed across our global network.

For Recruitment Services:

The Company may transfer the information you provide to us to countries outside the European Economic Area (‘EEA’) for the purposes of providing you with work-finding services. We will take steps to ensure adequate protections are in place to ensure the security of your information. The EEA comprises the EU member states plus Norway, Iceland, and Liechtenstein.

12. Data access, corrections, and other rights

Upon receipt of your written request (known as a Subject Access Request, or SAR) and enough information to permit us to identify your personal data, we will disclose to you the personal data we hold about you within one month of receipt of your request. We may withhold personal data to the extent permitted by law. If we decide we have a lawful basis for withholding your personal data, we will notify you within one month of receipt of your request and provide reasons for our decision. You will have a right to appeal this decision.

We will also correct or amend any personal data that you tell us is inaccurate.

In some circumstances, you have the right to the erasure of your personal data without undue delay. Those circumstances include the personal data being no longer necessary in relation to the purposes for which it was collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law. However, there are exclusions to the right to erasure. The general exclusions include where processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise, or defence of legal claims.

In addition, and in some circumstances, you have the right to restrict the processing of your personal data. Those circumstances are you contest the accuracy of the personal data; processing is unlawful, but you oppose erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise, or defence of legal claims; and you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it with your consent; for the establishment, exercise, or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.

For Recruitment Services:

Please be aware that you have the following data protection rights:

The right to be informed about the personal data the Company processes on you;
The right of access to the personal data the Company processes on you;
The right to rectification of your personal data;
The right to erasure of your personal data in certain circumstances;
The right to restrict processing of your personal data;
The right to data portability in certain circumstances;
The right to object to the processing of your personal data that was based on a public or legitimate interest;
The right not to be subjected to automated decision making and profiling; and
The right to withdraw consent at any time.

Where you have consented to the Company processing your personal data, you have the right to withdraw that consent at any time by contacting our DPO Vicki Setford at vicki.setford@tiroassociates.com. Please note that if you withdraw your consent to further processing, that does not affect any processing done prior to the withdrawal of that consent or which is done according to another legal basis.

There may be circumstances where the Company will still need to process your data for legal or official reasons. Where this is the case, we will tell you and we will restrict the data to only what is necessary for those specific reasons.

If you believe that any of your data that the Company processes is incorrect or incomplete, please contact us using the details above and we will take reasonable steps to check its accuracy and correct it where necessary.

You can also contact us using the above details if you want us to restrict the type or amount of data we process for you, access your personal data, or exercise any of the other rights listed above.

13. Content, media, and other material

Some of the content found on this website has been obtained from third-party sites, for example, stock imagery – strictly used for illustrational purposes.

Another example could be the use of copy used on the site to describe the services we offer, as they may have been provided and/or lifted from the technology we use/from our partner’s sites.

In addition, the use and display of our portfolio, brands we’ve helped, worked with, or any other similar term is often reviewed and vetted to make sure we display this information accurately. In some cases, we have used past experiences of our team to showcase the industries we have represented, collectively. It’s important to understand that we may be associated with these brands through their previous experiences, rather than ongoing clients or work directly through Tiro. We try our best to clearly display this information, including our transparency in this Privacy Policy.

We have tried in every effort to use royalty-free, non-copyrighted content, media, and other materials. We take blatant plagiarism very seriously and urge you to contact us if you feel we have misused, mis-sold, or misled anything displayed on this website.

14. Links to other websites

Our website may contain hyperlinks to websites that are not operated by us. We urge you to review any privacy policy posted on any site you visit before using the site or providing any personal information about yourself.

15. Person of responsibility

Although Tiro is not obligated to have a Data Protection Officer, they have appointed a person of responsibility, Vicki Setford: vicki.setford@tiroassociates.com. Further details can be found on the ICO Data Protection Public Register.

16. How to make a complaint

If you believe that we have breached this policy or any other applicable privacy or data protection laws or regulations which may apply to Tiro, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues: www.ico.org.uk. We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO, so please contact us in the first instance. You should address your complaint via email: recruit@tiroassociates.com. Please include as much detail as you can about the personal data affected and the circumstances that you believe amount to a breach of this policy or applicable privacy or data protection law or regulations.

We will undertake an internal investigation and may contact you if we need any further information relating to your complaint. We will generally attempt to provide a response within 30 days of receipt of your complaint. Our response will set out the results of the investigation, including whether we agree that Tiro has breached this privacy policy or applicable privacy or data protection laws or regulations.