Privacy
Privacy Policy
Pre-publication version. Subject to final review before launch.
How The People Bit collects, uses and protects personal information when you use our website, get in touch, join the TPB AI Agent early-access list, or work with us as a client. This policy is written to meet the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Who we are
The People Bit provides People (HR) support to growing businesses. For the processing described in this policy, The People Bit is the controller.
Questions about this policy or your information: hello@thepeoplebit.co.uk.
What we do today, and what is in development
- Available today: Human Advisory, where experienced People advisors support client businesses, working in each client’s own workspace.
- In development: the TPB AI Agent. It is not yet available, and it does not process any customer or employee information. When it launches, we will publish privacy information that describes how it works before anyone uses it.
- The interactive AI Agent examples on this website are scripted demonstrations using fictional scenarios. They do not use a live AI system and do not collect what you click.
Information we collect, why, and our lawful basis
| Purpose | Information | Lawful basis (UK GDPR) | How long we keep it |
|---|---|---|---|
| Responding to website enquiries | Name, work email, your message | Steps at your request before entering into a contract (Art. 6(1)(b)), or our legitimate interest in responding to business enquiries (Art. 6(1)(f)) | Up to 24 months after our last contact, unless you become a client |
| Providing Human Advisory to clients | Business contact details; billing details; information shared with us while we advise, which can include information about client employees | Performance of our contract with the client (Art. 6(1)(b)); for employee information, see “Client work” below | For the duration of the engagement, and afterwards for as long as needed to meet legal, accounting and contractual obligations, as set out in the client agreement |
| Early-access list for the TPB AI Agent | Full name, work email, company, role, company size, optional primary challenge, optional beta-testing interest, optional marketing preference, sign-up time, the notice shown, email-verification status, how you found us where available | Consent, given by joining the list after reading the notice shown on the form (Art. 6(1)(a)) | Until you unsubscribe or the early-access programme ends. If you don’t confirm your email address, we delete your registration |
| Beta-testing recruitment (optional) | Your beta-testing interest, plus the early-access details above | Consent, given by ticking the optional box (Art. 6(1)(a)) | Until you withdraw your interest or the testing programme ends |
| Broader marketing (optional) | Name, work email, your marketing preference | Consent, given by ticking the separate optional box (Art. 6(1)(a); PECR where it applies) | Until you unsubscribe |
| Website analytics | Aggregated usage and performance information | Our legitimate interest in understanding how the site is used and keeping it fast (Art. 6(1)(f)) | See “Analytics, cookies and similar technologies” |
Early-access emails
Joining the early-access list means you’ll receive emails about the TPB AI Agent: product development updates, testing opportunities and invitations to try the product when access becomes available. Every email includes a way to unsubscribe. Beta-testing interest is not consent to other marketing, and we will only send updates about our other services and offers if you tick that separate box.
Client work
Our advisors work in each client’s own workspace, such as Slack or Microsoft Teams, which the client controls. Client personal data, including information about employees, is processed there during the engagement. We may also hold some client information in our own systems, for example emails, documents, meeting notes and invoices, where that’s needed to deliver and administer the service.
Information about employees can include sensitive information, such as health or disciplinary matters. How that information is handled, including whether The People Bit acts as a controller or processor and the conditions relied on for any special category data, is set out in each client agreement.
Where we keep internal notes about matters we’ve helped with, to improve our service, we minimise them and pseudonymise them where practical. Pseudonymised information can still be personal data, and we treat it as such.
Analytics, cookies and similar technologies
Our live website uses Vercel Web Analytics and Speed Insights to understand how the site is used and how quickly it loads. These tools do not use cookies. Vercel processes limited technical information, such as your IP address and browser details, to produce aggregated statistics.
If you choose a light or dark display theme, the site remembers that choice in your browser’s local storage. This is only set when you choose it, and it is used for nothing else.
We don’t use advertising or cross-site tracking technologies. If that changes, we will update this policy and ask for consent where it’s required.
Who we share information with
We use a small number of service providers who process information on our behalf, under contract:
- Vercel: website hosting and analytics.
- Resend: sending website enquiry emails to us.
- Other providers we use to run the business, such as email, document storage and accounting services.
We don’t sell personal information, and we don’t share it with others for their own marketing.
International transfers
Some service providers may process information outside the UK, for example in the US or the EU. Where that happens, we rely on an appropriate safeguard, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
Your rights
Under the UK GDPR, you can ask us to: give you a copy of your personal information; correct it; delete it; restrict or object to our use of it; or provide it in a portable format. Where we rely on consent, you can withdraw it at any time, without affecting what we did before.
To exercise any right, email hello@thepeoplebit.co.uk. We’ll respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk), though we’d appreciate the chance to help first.
If you’re in the EU, you can also contact your local data protection authority.
Unsubscribing
Use the unsubscribe link in any email, or email hello@thepeoplebit.co.uk. Unsubscribing from early-access emails also ends any optional marketing.
Security
We use reasonable technical and organisational measures to protect personal information, including access controls and encrypted connections. No system is completely secure, and we review our practices as we grow.
Children
Our website and services are for businesses. We don’t knowingly collect information from children.
Changes to this policy
We’ll update this policy when our services or the law change, and show the date of the latest version at the top. Before the TPB AI Agent launches, we will update it to describe how the Agent processes information.