Privacy Policy

1. Introduction

Harvey-Wallace ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website harvey-wallace.co.uk or engage with our services.

Robert Harvey-Wallace trading as Harvey-Wallace is the data controller for the purposes of applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Information You Provide

When you contact us or request our services, we may collect:

• Name and contact information (email address, phone number)
• Company or organisation name
• Project details and requirements
• Budget and timeline preferences
• Any other information you choose to provide

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and general location data
• Browser type and version
• Operating system
• Pages visited and time spent on our site
• Referring website addresses

3. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide requested information
• Deliver and improve our services
• Communicate about projects and service updates
• Send administrative information
• Analyse website usage to improve user experience
• Comply with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data
• Contract: Processing necessary for the performance of a contract with you
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services
• Legal obligation: Processing necessary to comply with UK law

5. Data Sharing

We do not sell your personal information. We may share your data with:

• Service providers: Third-party services that help us operate our website and business (e.g., email services, analytics)
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with any merger or acquisition

Third-Party Services

Our website uses the following third-party services:

• Google Analytics: Website analytics (Google LLC, USA - Privacy Shield compliant)
• Vercel: Website hosting (Vercel Inc, USA - SOC 2 compliant)
• Maileroo: Email delivery for contact forms

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Contact form submissions are retained for up to 3 years unless you request earlier deletion.

7. Your Rights

Under UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of processing
• Portability: Request transfer of your data to another service
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time where we rely on it

To exercise any of these rights, please contact us at hello@harvey-wallace.co.uk

8. Cookies

Our website uses cookies to enhance your browsing experience:

• Essential cookies: Required for the website to function
• Analytics cookies: Help us understand how visitors use our site (Google Analytics)

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data transmission.

10. International Data Transfers

Some of our third-party service providers are based outside the UK. Where we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues: ico.org.uk/make-a-complaint