Privacy Policy

As data controller we determine why and how your personal data is processed. If you have any questions about this policy, or wish to exercise your rights, please contact us using the details above.

We do not collect special category data (for example health, biometric or financial data) through our website forms, and we do not knowingly collect data from individuals under 16 years of age.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider another purpose compatible with the original. We will notify you if we intend to use your data for a materially different purpose.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse site usage. By continuing to use our website you consent to our use of cookies as described in our Cookie Policy.

Google Analytics: we use Google Analytics 4 to collect anonymised data about how visitors use our website. Google may transfer this data outside the UK. IP anonymisation is enabled on our implementation. For more information see Google's Privacy Policy.

HubSpot: we use HubSpot for CRM and marketing tracking. HubSpot cookies help us understand which pages you have visited and whether you have previously contacted us. For more information see HubSpot's Privacy Policy.

You can control cookies through your browser settings. Disabling analytics cookies will not affect your ability to use our website, but may reduce our ability to improve your experience.

We do not sell your personal data. We may share it with trusted third parties only where necessary:

• HubSpot Inc. — CRM, email marketing and lead management (data may be processed in the USA under Standard Contractual Clauses)
• Google LLC — website analytics (data may be processed in the USA under Standard Contractual Clauses)
• IT service providers — hosting and platform providers acting as data processors under contract
• Professional advisers — solicitors, accountants or insurers where legally required
• Regulatory authorities — where required by law (for example HMRC or the ICO)

All third-party processors are required to process your data only on our documented instructions and in compliance with applicable data protection law.

Some of our third-party service providers (including Google and HubSpot) are based outside the UK and the European Economic Area. Where data is transferred internationally we ensure appropriate safeguards are in place, including the use of UK International Data Transfer Agreements (IDTAs) or equivalent Standard Contractual Clauses approved by the ICO.

We retain your personal data only for as long as necessary for the purpose it was collected:

After the applicable retention period, your data is securely deleted or anonymised.

Under UK GDPR you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you (Subject Access Request)
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your data where there is no compelling reason to keep it ("right to be forgotten")
• Right to restrict processing — you can ask us to pause processing of your data in certain circumstances
• Right to data portability — you can request your data in a structured, machine-readable format where processing is based on consent or contract
• Right to object — you can object to processing based on legitimate interests, including direct marketing
• Right to withdraw consent — where processing is based on consent you may withdraw it at any time, without affecting the lawfulness of prior processing
• Rights related to automated decision-making — we do not carry out solely automated decision-making or profiling that produces legal or significant effects

To exercise any of these rights, contact us at hello@howcroft.group or write to us at the address above. We will respond within one calendar month. We may ask you to verify your identity before processing your request.

We will only send you marketing emails or newsletters where you have given your explicit consent to receive them. You can unsubscribe at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Emailing us at hello@howcroft.group
• Calling us on +44 1709 878 282

Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal. We may still contact you in relation to an existing or pending order or enquiry.

We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These include:

• Secure encrypted connections (HTTPS/TLS) on our website
• Access controls limiting who can view personal data
• Regular security reviews of our systems and third-party processors
• Staff awareness of data protection obligations

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected individuals without undue delay.

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or regulatory guidance. Any changes will be reflected by the "last updated" date at the top of this page. Where changes are material, we will take reasonable steps to notify you. Continued use of our website after changes are published constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Howcroft Group Limited
Unit 9, Brookfields Way, Manvers, Rotherham, S63 5DL
Email: hello@howcroft.group
Tel: +44 1709 878 282