Privacy Policy

Last updated: 25 August 2026

Hands Off Admin Support (“we”, “us”, “our”) provides professional outsourced admin and virtual assistant services to UK businesses. This Privacy Policy explains how we collect, use, store and protect personal data in line with the UK GDPR and the Data Protection Act 2018.

1. Who we are

Hands Off Admin Support is based in the United Kingdom and can be contacted at info@handsoffsupport.co.uk. For data protection queries, please use the same address and mark your message “Data Protection”.

2. Information we collect

We may collect and process:

• Enquiry and contact data — name, business name, email address, phone number, and details you provide about the admin support you need (via our website form, email, phone or WhatsApp).
• Client and service data — information required to deliver admin services, which may include business contact details, calendars, emails, documents, invoices, CRM records and similar operational data you give us access to.
• Technical data — limited website usage information (e.g. IP address, browser type) via standard server logs or analytics tools, and advertising conversion tags where you have interacted with our ads.
• Communication records — emails, call notes and messages related to enquiries and ongoing support.

We do not intentionally collect special category data (e.g. health, political opinions). Please do not send such information unless we have agreed a specific, lawful basis for processing it.

3. How we use your information

We use personal data to:

• Respond to enquiries and arrange discovery calls
• Provide, manage and improve our admin support services
• Send service-related communications (quotes, onboarding, updates)
• Meet legal, accounting and regulatory obligations
• Measure advertising performance (e.g. Google Ads conversions) in a limited way
• Protect our business against fraud or misuse

We do not sell your personal data.

4. Legal bases for processing

Depending on the activity, we rely on:

• Contract — to deliver services you have asked us to provide
• Legitimate interests — to respond to enquiries, improve our service, and run a secure business, where these interests are not overridden by your rights
• Consent — where required (for example certain marketing), which you can withdraw at any time
• Legal obligation — where the law requires us to keep or disclose information

5. Client systems and confidentiality

When you engage us, you may grant access to tools such as email, calendars, cloud drives, accounting or CRM systems. We will:

• Use access only for the agreed admin tasks
• Treat your business information as confidential
• Follow any reasonable security instructions you provide
• Return or delete access credentials when the engagement ends, subject to any legal retention needs

You remain the controller of data in your own systems. We act as a processor for client data we handle on your behalf under a service agreement, and as a controller for our own business records (e.g. your billing contact details).

6. Sharing your information

We may share data with:

• Service providers who help us operate (e.g. email hosting, website hosting, form processing, analytics or advertising platforms), under appropriate agreements
• Professional advisers (accountants, legal) where needed
• Authorities if required by law

We choose providers carefully and do not share client confidential information for unrelated marketing by third parties.

7. International transfers

Some tools we use may process data outside the UK. Where that happens, we take steps to ensure appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) are in place.

8. How long we keep data

We keep personal data only as long as needed for the purposes above:

• Enquiry data — typically up to 24 months if you do not become a client, unless you ask us to delete it sooner
• Client records — for the duration of the engagement and a reasonable period afterwards (often up to 6 years) for accounting, legal and dispute purposes
• Marketing-related data — until you opt out or the data is no longer needed

9. Security

We use reasonable technical and organisational measures to protect personal data, including secure access to devices and accounts, careful handling of client credentials, and limiting access to those who need it. No method of transmission or storage is completely secure; we encourage strong passwords and prompt notification if you suspect a security issue.

10. Your rights

Under UK data protection law you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion in certain circumstances
• Restrict or object to certain processing
• Data portability, where applicable
• Withdraw consent where processing is based on consent

To exercise these rights, contact info@handsoffsupport.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

11. Cookies and similar technologies

Our website may use essential cookies and, where enabled, analytics or advertising tags (such as Google tags) to understand site use and measure conversions. You can control cookies through your browser settings. Blocking some cookies may affect site functionality.

12. Children

Our services are aimed at businesses and are not directed at children. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of our website or services after changes constitutes acceptance of the updated policy where permitted by law.

14. Contact

Questions about this policy or your personal data:
Email: info@handsoffsupport.co.uk
Website: handsoffsupport.co.uk