Privacy Policy

1. Who we are

Hirenza is a workforce compliance and hiring platform operated by Expedius Limited ("Hirenza", "we", "us", "our"), a company registered in England and Wales under company number 15038912, with its registered office at 64 Yardley Green Road, Birmingham, England, B9 5QE. "Hirenza" is a trading name of Expedius Limited.

Expedius Limited is the data controller responsible for personal data processed through this website (hirenza.com) and our employer enquiry, demo, and contact workflows. We are committed to protecting your privacy and handling your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Scope of this policy

This policy explains how we handle personal data collected through our public website and marketing activities — for example when you request a demo, submit an enquiry, contact us, or browse the site. Where you become a customer and use the Hirenza platform itself, the processing of worker and applicant data within the product is governed by your customer agreement and data processing terms, not by this website policy.

3. Personal data we collect

Information you give us when you complete a form, book a demo, use the chat widget, or email us, which may include:

• Your name and job title
• Business email address and phone number
• Company or organisation name
• The content of your enquiry or message, and any details you choose to share about your hiring or workforce needs

Information we collect automatically when you use the site:

• Usage and device data such as IP address, browser type, pages viewed, and interactions
• Cookie and similar-technology identifiers (see section 5)
• Marketing attribution data such as referring URL, the page you submitted from, and campaign (UTM) parameters, used to understand how enquiries reach us

We do not intentionally collect special category data through this website, and ask that you do not include sensitive personal information in free-text enquiry fields.

4. How and why we use your data

We use your personal data for the following purposes, each with a lawful basis under Article 6 of the UK GDPR:

• To respond to your enquiry and arrange demos — basis: taking steps at your request prior to entering a contract, and our legitimate interests in responding to business enquiries.
• To send you relevant communications about Hirenza where you have asked to hear from us or where we have a legitimate interest in contacting business prospects — basis: consent and/or legitimate interests. You can opt out at any time.
• To operate, analyse, and improve the website, including analytics and measuring marketing performance — basis: your consent for non-essential cookies, and our legitimate interests in running and improving our site.
• To maintain security and prevent misuse of the site — basis: our legitimate interests.
• To comply with legal and regulatory obligations — basis: legal obligation.

Where we rely on legitimate interests, we have considered the impact on your rights and will provide further detail on request.

5. Cookies and similar technologies

We use cookies and similar technologies to make the site work, to understand how it is used, and to measure our marketing. Non-essential cookies (such as analytics and marketing) are only set where you have given consent through our cookie banner. You can change or withdraw your consent at any time using the cookie controls on the site, and you can manage cookies through your browser settings.

The third-party tools we use that may set cookies or collect usage data include Microsoft Clarity and Google Analytics (website analytics), a LeadConnector live-chat widget, and ThreadRail (marketing attribution). These are described further in section 6.

6. Service providers we share data with

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf, under contracts that require appropriate safeguards. These include:

• Supabase — secure database hosting for enquiry and contact records
• Resend — delivery of transactional and notification emails
• Microsoft Clarity and Google Analytics — website analytics and usage measurement
• LeadConnector — live-chat and customer-relationship management
• ThreadRail — marketing attribution and campaign measurement

We may also share data with professional advisers, and with other operating companies in the Rajoka portfolio where it is appropriate to route your enquiry to the right team. Where regulated immigration or legal advice is involved, we coordinate with authorised professionals rather than providing that advice ourselves. We may disclose data where required to comply with the law or to protect our rights.

7. International transfers

Some of our service providers process data outside the United Kingdom. Where personal data is transferred internationally, we rely on an appropriate safeguard recognised under UK data protection law — such as UK adequacy regulations, the International Data Transfer Agreement, or Standard Contractual Clauses with the UK Addendum — to ensure your data remains protected.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this policy — for example, to handle your enquiry and any resulting relationship — and to meet our legal, accounting, or reporting obligations. When data is no longer needed, we securely delete or anonymise it. If you ask us to stop contacting you or to erase your data, we will act on that request subject to any legal retention requirements.

9. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate or incomplete data
• Ask us to erase your data in certain circumstances
• Restrict or object to our processing, including direct marketing
• Request portability of data you provided to us
• Withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us at privacy@rajoka.com (please include "Hirenza" in the subject line). You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk — though we would welcome the chance to address your concerns first.

10. How we protect your data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including access controls and encryption in transit. No method of transmission over the internet is completely secure, but we take reasonable steps to safeguard the information you share with us.

11. Third-party links

Our website may link to third-party sites. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies.

12. Children

Hirenza is a business-to-business service and is not directed at children. We do not knowingly collect personal data from anyone under 18 through this website.

13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be highlighted on this page.

14. Contact us

For any privacy-related question or to exercise your rights, contact us at privacy@rajoka.com (please include "Hirenza" in the subject line), or write to: Expedius Limited, 64 Yardley Green Road, Birmingham, England, B9 5QE. Our Data Protection Officer can be reached at dpo@harveyslegal.com.