A client privacy policy that matches HR data handling

A common issue is using a generic website privacy policy that does not reflect the way an HR consultancy actually handles information. Many firms receive CVs, interview notes, reference checks, payroll details, performance material or complaint information on behalf of clients, yet their policy only describes basic website enquiries. That gap matters because the legal position depends on the way the business handles information in practice. A policy that matches your real workflows is more useful than a broad template that ignores recruitment, advisory or outsourced people operations work.

It will usually explain what personal information your consultancy collects, why it is collected, how it is used, when it may be disclosed, how people can request access or correction, and how privacy enquiries are handled. For HR consultancies, the detail often turns on whether you deal with candidate screening, employee relations matters, client HR systems, subcontractors or cloud software providers. If you receive information from clients about their staff, that can affect the wording. The final document is drafted to reflect those practical data flows rather than a one-size-fits-all description.

We will usually need a practical picture of your consultancy's services and information handling. That may include whether you recruit, run investigations, provide outsourced HR support, manage performance processes, collect referee details, or access client HR platforms. We may also ask how enquiries come in through your website, what software tools you use, whether information is shared with clients or third parties, and whether you hold sensitive employment-related records. Those details shape the wording, because the right approach depends on the documents and factual context.

You can, but templates often miss the parts that matter most for HR consultancies. A standard template may describe general website data collection but say little about candidate shortlists, interview feedback, workplace investigation material, psychometric testing, or client instructions about employee records. If your public policy does not line up with your actual practices, that can create unnecessary risk and confusion. A tailored document is usually more appropriate where your consultancy handles sensitive people information or shares information across clients, contractors and software providers.

Timing depends on how quickly we receive clear instructions about your services, data sources and systems. Once we have the information needed, we draft the policy and come back to you with the document for review and any follow-up questions. If your consultancy has multiple service lines, such as recruitment plus outsourced HR support, that can affect timing because the wording may need to cover several data scenarios. This service covers the policy drafting work itself. It does not include ongoing privacy officer support, technical rollout or staff training.

Submit an enquiry on this page or click 'Get started'. One of our legal consultants will review it within 1 business day and get in touch to understand what you need.

Your consultant will then email you a fixed-fee quote setting out the cost, scope and timing. If you're happy with it, you can accept the quote and sign our engagement letter online.

Once you've accepted, one of our Australian-qualified lawyers will work with you to complete your project. They'll contact you by email or phone if they need anything.

Sprintlaw works on fixed-fee pricing wherever possible, so you can review the scope and cost before you decide whether to proceed. For the Client Privacy Policy For HR Consultancies service, pricing starts from $900.00.

After you enquire, a legal consultant will confirm what is included, the expected timing and whether any extra work is needed before you engage us.

We work online, so we can help wherever you are in New Zealand. Our team works remotely, mainly from Australia.

Your work is done by our Australian-qualified lawyers, who hold Australian practising certificates and specialise in business law. None of them are New Zealand lawyers or hold a New Zealand practising certificate.

Sprintlaw NZ Limited is a legal consultancy, not a law firm, and is not regulated by the New Zealand Law Society. We don't act in court or tribunal matters, conveyancing (including leases and business sales) or other reserved areas of work. Communications with Sprintlaw are unlikely to be protected by legal professional privilege. We still keep everything confidential under our engagement letter.