Legal

Privacy Policy

Last updated: April 2026

360 HCM Limited ("we", "our", "us") is registered in England and Wales (Company No. 17016045). We are committed to protecting the privacy of everyone who interacts with our website and services. This policy explains what information we collect, how we use it, and the rights you have under UK GDPR.

Information we collect

Risk Review bookings

When you book a Risk Review, we collect your name, email address, and any programme details you choose to share via the booking form.

Selection Review enquiries

When you submit a Selection Review enquiry via the form on /selection-review, we collect your name, company, email address, the Workday products in scope of your selection, your selection stage, your target decision window, and any free-text notes you provide. We use this to prepare a written assessment within one working day. We also record your IP address and user agent at submission time for rate-limiting and security purposes.

Assessment tools

When you complete any of our assessment tools (including the SI Vendor Scorecard, Go-Live Readiness Assessment, and Programme Risk Scorecard), we collect your name, email address, organisation name, and your responses to the assessment questions. We use this information to generate your personalised PDF report and to send it to you by email.

Newsletter and updates subscription

If you choose to subscribe to updates from 360 HCM, we collect your email address and the date of subscription. You can unsubscribe at any time using the unsubscribe link in any email we send, or by emailing info@360hcm.com. We will remove your email address within 5 working days of any unsubscribe request.

Server logs

We may collect technical information automatically through standard server logs, including IP address, browser type, and referring pages. This information is used for security and operational purposes only.

How we use your information

We use the information you provide only to:

  • Respond to your enquiry or booking request
  • Generate and deliver your assessment report
  • Schedule any requested meeting
  • Deliver the written Risk Review summary where applicable
  • Send updates and insights you have subscribed to receive

We do not share, sell, or rent your personal information to third parties. We do not add you to marketing lists without your explicit opt-in consent.

Assessment responses and generated reports may be seen by Jeff Greening (Founder, 360 HCM Limited) for the purpose of preparing a relevant response or follow-up.

Data retention

Assessment, Risk Review, and Selection Review submission data is retained for a maximum of 24 months from the date of submission, after which it is deleted.

Subscriber email addresses are retained until you unsubscribe or request deletion.

You may request earlier deletion of any data we hold about you at any time by emailing info@360hcm.com.

Third-party services

Our website and tools use the following third-party services which may process your data:

  • Resend, used to send transactional emails including assessment reports and Risk Review confirmations. Data processed in accordance with Resend's privacy policy.
  • Vercel, our website hosting provider. Standard server and infrastructure data is processed by Vercel in accordance with their privacy policy.
  • Neon (PostgreSQL database), we use Neon's serverless Postgres platform to store assessment submission data and newsletter subscriber information. Data is processed in accordance with Neon's privacy policy. Neon is SOC 2 Type 2 certified.
  • Cal.com / Calendly, used for Risk Review booking. If you book via the scheduling tool, your data is also subject to their respective privacy policy.

We do not use Google Analytics, advertising networks, or any third-party tracking or profiling tools.

Cookies

This website uses only essential cookies required for basic functionality. We do not use tracking, advertising, or analytics cookies. No consent is required for strictly necessary cookies under UK PECR.

If this changes, we will update this policy and add a consent mechanism before setting any non-essential cookies.

Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data
  • Restrict or object to our processing of your data
  • Request a portable copy of your data

To exercise any of these rights, email info@360hcm.com. We will respond within 30 days.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Contact

360 HCM Limited

71-75 Shelton Street

London WC2H 9JQ

United Kingdom

info@360hcm.com

Company No. 17016045