How we look after your information.

1. Who we are

H&J Business Solutions ("we", "us") is the controller of the personal information described in this notice. Our registered office is in London, United Kingdom. If you have any questions about this notice or how we handle your information, contact us at support@hnjuk.co.uk or on +44 (0)7824 020031.

2. What information we collect

When you contact us through the website. The contact form asks for your name, email address and a message, and optionally your company, phone number, what you need and a rough budget. Our form provider also records the time of the submission and technical details such as your IP address to run the form and filter spam.

When you email, call or message us. We keep the correspondence and any details you choose to give us, including your name, contact details and the content of your message. If you contact us through a messaging app, that service also processes your message under its own privacy policy.

When you browse the site. Our hosting provider keeps standard server logs, which include your IP address, browser type, the pages requested and the time of the request. The site's fonts are loaded from a third-party font service, which receives your IP address when the font files are requested. We do not use analytics tools or advertising trackers.

When you become a client. We hold the information needed to deliver and manage our services: contact details for the people we work with, contract and billing details, and the information you give us about your systems and organisation. This is governed by our agreement with you and, where we process personal data on your behalf, by that agreement's data-processing terms.

3. How we use it and our legal basis

• To respond to your enquiry and discuss the work you have asked about. Legal basis: taking steps at your request before entering a contract, and our legitimate interest in responding to people who contact us.
• To deliver services to you or your organisation, manage the relationship and invoice for the work. Legal basis: performance of a contract.
• To keep records we are required to keep, such as accounting records. Legal basis: legal obligation.
• To run and secure the website, including spam filtering and detecting misuse. Legal basis: our legitimate interest in keeping the site available and secure.
• To send you marketing, only if you have asked for it. We do not send newsletters or unsolicited marketing, and you can withdraw consent at any time. Legal basis: consent.

We do not sell personal information and we do not use it for automated decision-making.

4. Who we share it with

We use a small number of service providers to run the business. They process information on our instructions and under contracts that require them to protect it:

• Our website hosting provider, which also processes contact-form submissions and filters spam.
• Our email service provider, which stores and delivers our email.
• A third-party font service, which serves the fonts used on this site.
• Messaging services such as WhatsApp, if you choose to contact us through one.

We may also share information with our professional advisers, and with regulators, law enforcement or courts where the law requires it. If we bring specialist partners into a project, we only share what they need to do their part of the work, under confidentiality obligations.

5. Where it is stored

Some of the providers above store information outside the United Kingdom, including in the United States. Where that happens we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, or on a UK adequacy decision for the country concerned.

6. How long we keep it

• Enquiries that do not lead to work: up to 12 months from our last contact, so we can pick the conversation back up if you return.
• Client records: for the length of our relationship and for six years afterwards, in line with UK limitation periods and tax record-keeping requirements.
• Server logs: kept by our hosting provider for a short period for security purposes, typically no more than 30 days.

When information is no longer needed we delete it or anonymise it.

7. Cookies

This website does not set cookies and does not use analytics, advertising or social-media tracking. If that changes we will update this notice and, where required, ask for your consent first.

8. How we protect it

The site is served over HTTPS, access to the systems that hold your information is restricted to the people who need it, and we use reputable providers with their own security certifications. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information and we will tell you and the regulator if a breach affecting you occurs and the law requires it.

9. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information, or to restrict how we use it, in certain circumstances;
• object to processing based on our legitimate interests;
• receive the information you gave us in a portable format;
• withdraw consent at any time where we rely on consent.

To exercise any of these rights, email support@hnjuk.co.uk. We will respond within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, although we would welcome the chance to resolve any concern with you first.

10. Children

Our services are for businesses and this website is not directed at children. We do not knowingly collect information from anyone under 18.

11. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed, and the current version will always be published at hnjuk.co.uk/privacy.html.