Last updated: 30 September 2026
This policy explains how SixBerries collects, uses and protects personal information when you visit our website, talk to us about our services, work with us as a client, or apply to join us as a specialist. We keep it in plain English. If anything is unclear, email us and we’ll explain.
1. Who we are
SixBerries Ltd, a company registered in England and Wales (company number 08828692), registered office 3 Lucas Avenue, Harrow, England, HA2 9UH (“SixBerries”, “we”, “us”), is the controller of the personal information described in this policy, unless we say otherwise below.
For any privacy question or request, contact Donnie Bachan, CEO, at donnie@sixberries.com. You can also write to us at our registered office.
2. The information we collect
Website visitors
Our website is designed to collect as little as possible. When you visit, our hosting and security systems automatically record technical information needed to deliver and protect the site: your IP address, browser type, the pages requested and the date and time. We do not currently use analytics, advertising or tracking cookies. See our Cookie Policy.
People who book a call or contact us
If you book a call through our booking page, email us or phone us, we collect what you give us, typically your name, work email, phone number, company, job title and details of the work or roles you’re interested in. Bookings are handled by Google Calendar, so Google also processes the details you enter (see section 6).
Business contacts we reach out to
We sometimes contact people at organisations we think could benefit from our services. For this, we use business contact details (name, job title, company, work email, work phone and professional profile such as LinkedIn) obtained from publicly available sources, professional networks, events and introductions, and from email-finding and verification tools such as Hunter. Section 9 explains how to opt out.
Clients
When you work with us, we process the names, contact details and roles of your people who manage the engagement, plus correspondence, meeting notes, performance reports, invoices and payment records.
Specialists and job applicants
If you apply to work with us or join a client team through us, we collect your CV and work history, skills, qualifications, references, interview notes, assessment results, right-to-work and identity checks where required, contract and payment details, and performance information during engagements. We only collect information that is relevant to finding, placing, managing and paying specialists.
We do not ask for special category information (such as health, ethnicity or religious beliefs) unless the law requires it or you choose to tell us, for example to request adjustments during an interview. Where we do hold it, we protect it with extra care and use it only for that purpose.
3. How we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR / EU GDPR) |
|---|---|
| Running, securing and troubleshooting the website | Legitimate interests: keeping our site available and safe |
| Responding to enquiries and holding booked calls | Legitimate interests; or steps you ask us to take before entering a contract |
| Contacting business prospects about our services | Legitimate interests: business-to-business marketing, with an easy opt-out |
| Delivering services to clients, reporting and invoicing | Contract; legal obligation (tax and accounting records) |
| Recruiting, vetting and placing specialists | Legitimate interests; steps before a contract; legal obligation (right-to-work checks) |
| Managing specialists’ contracts, payments and performance | Contract; legal obligation |
| Sending insights or updates you’ve asked for | Consent, which you can withdraw at any time |
| Establishing or defending legal claims | Legitimate interests; legal obligation |
Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for details of that assessment.
We do not sell personal information, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects. We may use software, including AI-assisted tools, to help organise information or draft communications, but a person reviews any decision about a candidate, specialist or client.
4. Who we share it with
We share personal information only when we need to, and only with:
- Clients: specialists’ profiles, CVs and interview availability when we propose them for a role, and performance information during an engagement.
- Specialists: client contact names and working details they need to do the work.
- Service providers who act on our instructions under contract: website hosting and security (SiteGround, WPMU DEV), email, calendar and document storage (Google Workspace), contractor management and payments (Remote), our client and prospect database (Airtable), email-finding and verification (Hunter), video calls, accounting and banking providers.
- Professional advisers: accountants, lawyers and insurers, where needed.
- Authorities: where the law requires it, for example tax authorities or in response to a valid legal request.
- A buyer or investor: if all or part of our business is sold or restructured, under confidentiality terms.
5. International transfers
We are a UK company with a team in the UK and Portugal, and specialists and service providers in other countries, including India, Nigeria, Trinidad and Tobago, Colombia, Bosnia and Herzegovina and the United States. This means personal information may be accessed from or stored outside the UK and the European Economic Area.
When that happens, we make sure it is protected by an adequacy decision, the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or another safeguard recognised by law. You can ask us for a copy of the relevant safeguard.
6. Third-party services
Our booking page is provided by Google Calendar. When you book, Google processes your details under its own terms and privacy policy, as well as on our behalf. Links to other sites, such as LinkedIn, are governed by those sites’ own policies.
7. How long we keep it
| Information | How long |
|---|---|
| Website security and server logs | Up to 90 days, unless needed to investigate an incident |
| Enquiries and prospect contact details | Up to 2 years after our last meaningful contact |
| Client engagement and financial records | The length of the contract plus 6 years |
| Applicants who aren’t placed | Up to 12 months after the process ends, or longer if you ask us to keep you in mind for future roles |
| Specialists’ contract, payment and right-to-work records | The length of the engagement plus 6 years |
After these periods, we delete or anonymise the information.
8. How we protect it
We use access controls, multi-factor authentication, encryption in transit, reputable hosting and regular software updates. Access is limited to people who need it for their role, and they are bound by confidentiality. When specialists work inside a client’s systems, they follow that client’s security and data policies.
9. Your rights
Under UK and EU data protection law, you have the right to:
- access the personal information we hold about you;
- have inaccurate information corrected;
- have your information deleted, where there’s no good reason for us to keep it;
- restrict or object to how we use it, including objecting at any time to direct marketing;
- receive your information in a portable format, where the law allows;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, or to stop hearing from us, email donnie@sixberries.com. We’ll respond within one month. We may need to confirm your identity first. There is no charge in most cases.
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or, if you are in the EU, to your local data protection authority, such as the Comissão Nacional de Proteção de Dados in Portugal (cnpd.pt).
10. Children
Our services are for businesses and working professionals. We do not knowingly collect information from anyone under 18.
11. Changes to this policy
We’ll update this policy when our practices change and show the date at the top. If a change significantly affects how we use information you’ve given us, we’ll let you know directly.