This policy explains what we do with personal information. It covers people who visit this website, who contact us, who work for our clients, and who supply us.
It is written in two parts, because we handle personal information in two quite different ways and the difference matters. The first part covers information we hold for our own purposes. The second covers the payroll and HR information we handle on behalf of our clients, where the rules are set by them rather than by us.
Who we are
LitE Consulting Ltd is a payroll bureau and HR and payroll systems consultancy, trading as LitE Payroll and LitE Consulting.
- Registered in England and Wales, company number 09772549
- Registered office and trading address: Unit 1b, 2 Jubilee Way, Faversham, Kent ME13 8GD
- Registered with the Information Commissioner’s Office, registration number ZA336449
If you have a question about this policy or about information we hold, contact Simon Gibbs, our contact for data protection matters.
Email support@liteconsulting.co.uk or telephone 01227 206495.
The two roles we hold, and why it matters to you
Under data protection law an organisation is either a controller, which decides why and how personal information is used, or a processor, which handles it on somebody else’s instructions.
We are the controller for information about people who visit this website, who enquire about our services, who work for our clients and suppliers as our day to day contacts, and who work for us. Everything in part one applies to that information.
We are a processor for the payroll and HR information we handle in order to run payroll for our clients.
If you are an employee of one of our clients, your employer is the controller of your information, not us. We handle it only on their instructions, under a written agreement with them. Requests about that information should go to your employer in the first instance, and we will help them answer you.
Part one: information we hold as controller
What we collect, and why
If you visit this website. Your IP address, browser and device type, the pages you look at and how you arrived. We use this to understand whether the website is working and which pages are useful. See the cookies section below.
If you contact us. Your name, email address, telephone number, your organisation and whatever you choose to tell us in your message. We use it to answer you, and to keep a record of the conversation if it leads somewhere.
If you become a client, or work for one. Names, job titles, work contact details and correspondence, for the people we deal with at your organisation. We use this to run the service, to invoice, and to keep in touch.
If you supply us or work with us as an associate consultant. Contact details, correspondence, and the information needed to engage and pay you.
If you apply to work with us. Your application, CV and the correspondence around it.
We do not buy lists and we do not build profiles of people who have not contacted us.
Our lawful basis
| What we use it for | Lawful basis |
|---|---|
| Answering an enquiry you sent us | Legitimate interests: responding to somebody who has asked us something |
| Providing our services and invoicing for them | Performance of a contract, or steps taken before entering one |
| Keeping accounting, tax and payroll bureau records | Legal obligation |
| Understanding how the website is used | Legitimate interests: running and improving our own website |
| Sending you occasional information about our services | Consent, or legitimate interests where you are an existing client and can opt out at any time |
| Establishing, exercising or defending legal claims | Legitimate interests |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights. You can ask us for that reasoning and you can object. See Your rights below.
Who we share it with
We do not sell personal information and we do not share it for anybody else’s marketing.
We use the following suppliers, who handle some personal information on our behalf under contract:
| Supplier | What they do for us |
|---|---|
| Hostinger | Hosts this website and the enquiry records it stores. United Kingdom data centres |
| Microsoft | Email, documents and file storage, through Microsoft 365. United Kingdom data centres |
| Website analytics and search performance reporting | |
| Employment Hero | The payroll and HR platform our payroll service runs on. Hosted on Amazon Web Services, with transfers outside the UK covered by the UK Addendum and EU standard contractual clauses |
| Changepen | The client portal our clients use to send us changes, files and messages. Hosted in Microsoft Azure’s United Kingdom data centre |
| Dickinson Accountants (Kent) Limited | Our own accounting records |
| Quaytech Systems | IT support for our systems |
We will also share information where the law requires it, for example with HMRC, the Pensions Regulator or a court.
If the business is ever sold or transferred, information would pass to the buyer under the same protections.
Where your information is held
Almost all of it stays in the United Kingdom. This website and its enquiry records, our email and documents in Microsoft 365, and our client portal Changepen, which runs in Microsoft Azure’s United Kingdom data centre, are all held in UK data centres.
The one exception is the payroll platform. Employment Hero processes or backs up some data outside the UK. Those transfers are covered by Employment Hero’s data processing addendum, which relies on the UK Addendum to the European Commission’s standard contractual clauses and on the EU standard contractual clauses. The detail is in part two.
Where information is transferred outside the UK, we rely on the UK government’s adequacy regulations where they apply, and otherwise on the International Data Transfer Agreement or the UK Addendum.
You can ask us for details of the arrangement that applies to any particular supplier.
How long we keep it
| Information | How long |
|---|---|
| Website analytics | 14 months |
| An enquiry that does not become a client | 12 months from our last contact |
| Client records, contracts and correspondence | Seven years after the end of the relationship, to cover tax and limitation periods |
| Accounting records | Six years plus the current year, as required by law |
| Unsuccessful job applications | Six months, unless you agree to us keeping them longer |
Payroll information we hold as a processor is kept for as long as the client instructs, and is covered in part two.
How we protect it
We take security seriously because of the kind of information our work involves. Our measures include access controls and multi factor authentication on the systems that hold personal information, encryption in transit, restricting access to those who need it, written agreements with every supplier who handles data for us, and regular review of who has access to what.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- have inaccurate information corrected
- ask us to delete information, in some circumstances
- ask us to restrict how we use it, in some circumstances
- receive information you gave us in a portable format, in some circumstances
- object to us using it where we rely on legitimate interests
- withdraw consent at any time, where we rely on consent
- ask us not to send you marketing, at any time
To exercise any of these, contact us using the details at the top. We will respond within one month. If a request is complex we may need longer, and we will tell you if so.
If you are an employee of one of our clients and your request concerns payroll information, please contact your employer, who is the controller of that information.
Cookies and analytics
We ask before we set anything. When you first visit this site you will see a notice with two equally prominent choices, Accept and Deny, and a third option to set your preferences in detail. Until you choose, no analytics or advertising cookies are set at all.
The only cookies that run regardless are the ones needed for the site to function and to remember the choice you made, so that we do not ask you again on every page.
If you accept, we use Google Analytics to understand how the site is used: which pages people find, how they arrived, and whether anything is broken. We use that only to run and improve this website. We have turned off the settings that would let Google use your data for its own products or for advertising personalisation, and advertising personalisation is disabled for every region. Analytics data is held for 14 months and then deleted.
If you decline, nothing is set and nothing is measured. The site works exactly the same.
You can change your mind at any time using the Manage consent link at the foot of every page. We also respect Do Not Track and Global Privacy Control signals, so if your browser sends one we will not track you whatever the notice says.
Our full cookie policy, listing each cookie and what it does, is at liteconsulting.co.uk/cookie-policy-uk/.
Complaints
If you are unhappy with how we have handled your information, tell us first. Contact us using the details at the top of this policy. You can complain in whatever way suits you, including by email, by telephone or by letter. We will acknowledge your complaint within 30 days of receiving it, investigate it, and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office at any time, whether or not you have come to us first:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone 0303 123 1113
Part two: payroll information we handle for our clients
When we run payroll for an employer, we handle information about their employees. That includes names, addresses, dates of birth, National Insurance numbers, bank details, pay, tax codes, pension contributions, absence and, where relevant, information about earnings attachments and statutory payments.
The employer is the controller of that information. We are their processor. This means:
- We use it only to carry out the payroll service, on the employer’s documented instructions
- We do not use it for our own purposes and we never use it for marketing
- We hold it under a written data processing agreement with the employer, which sets out what we may do, the security we must apply, the other processors we are permitted to use, how long we keep it and what happens at the end of the contract
- We tell the employer without undue delay if there is a personal data breach affecting their information, so that they can meet their own obligations
- We assist the employer in responding to requests from their employees
- We return or delete the information at the end of the contract, as the employer instructs, subject to anything we are required by law to keep
The platforms this service runs on are Employment Hero and, for client communication, Changepen. Both act as further processors, under contract. Changepen is hosted in Microsoft Azure’s United Kingdom data centre, so the files and messages you send us through the portal do not leave the UK.
Where payroll data is held
The Employment Hero platform runs on cloud infrastructure provided by Amazon Web Services. Some data is processed or backed up outside the United Kingdom. Those transfers are covered by Employment Hero’s data processing addendum, which relies on the UK Addendum to the European Commission’s standard contractual clauses and on the EU standard contractual clauses. We can provide the current version of that addendum, and the equivalent position for Changepen, on request.
How long payroll data is kept
As processor we keep it for as long as you, the employer, instruct, and we return or delete it at the end of our contract as you direct, subject to anything we are required by law to retain. Setting those periods is your decision rather than ours, because you are the controller.
Most employers align them to the UK statutory minimums, which for payroll and PAYE records is generally three to six years, for personnel files six years after employment ends, for statutory sick pay three years, and for working time records two years. If it is useful, we will set out the periods we hold for you in writing as part of the data processing agreement.
If you are an employee and you want to know what is held about you, or want something corrected, ask your employer. They hold the relationship with you and they decide these questions. We will support them in answering.
Employers who would like a copy of our data processing agreement, or details of the processors we use, can request them from support@liteconsulting.co.uk.
Changes to this policy
We review this policy at least annually and whenever our processing changes materially. This is version 1.0, published 16 October 2026. Previous versions are available on request.