Last updated: 02/18/2026
1. Purpose and Scope
This policy explains how Handshake Ltd (“Handshake”, “we”, “us”, “our”) collects and uses your personal data when you visit our website, submit a form through our website, interact with our marketing, interact with us directly, or otherwise communicate with us.
For the purposes of UK data protection law, Handshake is the data controller in relation to personal data processed through this website and our corporate operations.
This Privacy Policy does not apply to personal data processed within the Handshake platform on behalf of our customers. In that context, Handshake acts solely as a data processor, and processing is governed by customer contracts and applicable Data Processing Agreements.
If you have any questions about this Privacy Policy or our data protection practices, please contact:
Handshake Ltd
Company number: 15764630
Email:
hello@handshake-solutions.com Flat 2 Swan Court, Chelsea Manor Street,
London, England, SW3 5RT
2. Personal data we collect
Information you provide to us may include: Identity and contact details such as name, business email, company name, job title, telephone number, if you choose to provide this information Communications that we exchange, including when you contact us with questions or feedback Recruitment information such as CVs, employment history, and education, if you choose to provide this information
Automatic Data collection: We may automatically log information about you such as IP address, device information, browser type, as well as usage data on the website such as pages you viewed, interactions with our website, and time spent on each page.
Cookies: Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work efficiently, as well as to provide information to website owners. Cookies may be session cookies (which expire when you close your browser) or persistent cookies (which remain on your device for a set period of time). Handshake uses cookies for the following purposes on https://www.handshake-solutions.com:
Essential Cookies: These cookies are essential for the operation and security of our website. They enable core functionality such as page navigation, security protection, and load balancing.
Analytics cookies:
We use analytics cookies to understand how our website is used (Google Analytics), for example which pages are visited and how visitors navigate the site. This helps us monitor performance, identify issues, and make improvements to the structure and content of the website.
B2B Website Analytics Cookies:
We use business intelligence cookies to understand interest in Handshake at an organisational level, such as which companies engage with our website and how our content performs. This helps us assess the effectiveness of our communications and sales activity.
Consent: When you visit our website from the UK or EU, we will ask for your consent before setting any non-essential cookies. You can accept all cookies, reject non-essential cookies, and change your cookie preferences at any time using the cookie settings link on our website.
Managing Cookies:
You can also manage cookies through your browser settings. Most browsers allow you to see which cookies are stored on your device, delete existing cookies, or block cookies altogether. Please note that blocking some types of cookies may affect the functionality of our website.
Information we collect from third parties:
We maintain third-party social media pages, including LinkedIn. If you interact with us through these pages (for example, by commenting on or messaging us), we may receive personal data such as your name, profile information, and the content of your communications. Any personal data collected by the social media platforms themselves is processed in accordance with their own privacy policies, and is not under our control.
We may also obtain personal data about you from publicly available sources, such as your organisation’s website, professional networking platforms, business directories, industry publications, Companies House and from our advertising and marketing partners.
We do not intentionally collect special category personal data via our website.
3. How and why we use personal data
We may process your personal data for the following purposes:
Providing services to you:
1. Operating and securing our website
2. Dealing with your enquiries, complaints, queries and demo requests
3. Recruitment and hiring activities
Marketing:
1. We may use personal data and work with selected marketing and advertising partners, including social media platforms, to promote our services. This may include displaying relevant advertising or promotional content on third-party websites and platforms.
Legal Basis: The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:
1. Performance of a contract with you: Where we need to perform a contract we are about to enter into or have entered into with you.
2. Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud, secure our website and enable us to provide services to you. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
3. Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.
4. Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose.
The specific legal basis relied upon depends on the context in which personal data is processed.
4. Sharing personal data
We may share your personal data with the following parties:
1. Service providers: We may share personal data with trusted third-party service providers who perform services on our behalf, such as website hosting, customer relationship management (CRM), analytics, email delivery, and security services.
2. Professional advisers: We may share personal data with our professional advisers, including legal counsel, accountants, auditors, insurers, and other advisers, where necessary for the provision of professional services or to comply with legal or regulatory obligations.
3. Advertising and marketing partners: Where permitted by law, we may share personal data with advertising and marketing partners to help us promote our services, measure campaign effectiveness, or deliver relevant content.
4. Affiliates or group companies: We may share personal data with our affiliates or group companies if applicable for internal administrative purposes and for purposes consistent with this Privacy Policy, subject to appropriate safeguards.
5. Authorities or regulators where required: We may disclose personal data to law enforcement agencies, courts, regulators, or other public authorities where required to do so by law, or where we believe in good faith that such disclosure is necessary to protect our rights, comply with legal obligations, or respond to lawful requests.
6. Parties involved in corporate transactions: We may share personal data with third parties involved in a merger, acquisition, reorganisation, sale of assets, or similar corporate transaction, including during due diligence or negotiations. In such cases, personal data will be shared subject to appropriate confidentiality and data protection safeguards. If a change happens to our business, the new owners may use your personal data in the same way as set out in this privacy policy.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
5. International data transfers
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including adequacy regulations or International Data Transfer Agreements (IDTAs).
Some jurisdictions may not provide the same level of data protection as the UK.
6. Data Security
We implement appropriate technical, organisational, and physical measures designed to protect personal data against accidental destruction, loss, alteration, use, or unauthorised disclosure. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
While we take reasonable steps to safeguard personal data, no system can be completely secure, and we cannot guarantee the absolute security of personal data. We will notify you and any applicable regulator of a breach where we are legally required to do so.
7. Data retention
We retain personal data only for as long as necessary, typically:
1. Sales and enquiry data: while relevant to our relationship
2. Marketing data: until you opt out. Opt out by contacting us at hello@handshake-solutions.com
3. Recruitment data: typically up to 12 months
Retention periods may be extended if reasonably necessary to fulfil the purposes for which we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
In some circumstances you can ask us to delete your data: see paragraph 10 below for further information.
8. Your legal rights
Which lawful basis we rely on to process your data may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the UK Information Commissioner’s Office (ICO) website.
Right of access: You have the right to request confirmation of whether we process your personal data and, where we do, to request access to that data. This includes information about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the data has been disclosed, and the envisaged period for which the data will be stored. You can read more about this right
here.
Right to rectification: You have the right to request that we correct or update any personal data that is inaccurate or incomplete. You can read more about this right
here.
Right to erasure: You have the right to request the deletion of your personal data where there is no lawful reason for us to continue processing it, for example where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other lawful basis applies. You can read more about this right
here.
Right to restrict processing: You have the right to request that we limit the processing of your personal data in certain circumstances, such as where we are considering a challenge you have made to the accuracy of your data or an objection you have made to its processing. Where processing is restricted, we may store the data but will not otherwise use it unless permitted by law. You can read more about this right
here.
Right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including for direct marketing purposes. You can read more about this right
here.
Right to data portability: You have the right to request that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right
here.
Right to withdraw consent: Where we rely on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the consent was withdrawn. You can read more about this right
here.
Right to lodge a complaint: You have the right to lodge a complaint with the ICO if you believe that our processing of your personal data does not comply with applicable data protection law.
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on individuals. To make a data protection rights request, contact
hello@handshake-solutions.com. If you make a request, we must respond to you without undue delay and in any event within one month.
9. Children
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we learn that we have collected personal data from a child without valid parental consent, we will promptly delete that data. Parents or legal guardians who believe their child has provided personal data to us may contact us to request deletion.
10. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page.
