Privacy Policy

1. Who we are

HADLY is the trading name of Callum Hadley, a sole trader providing website design, website management and related digital services. For UK data-protection law, Callum Hadley is the controller of the personal information described in this policy.

Contact email: callum@hadly.co.uk
Website: hadly.co.uk
Business correspondence address: [INSERT BUSINESS ADDRESS BEFORE PUBLISHING]

2. Information we collect

We may collect the following categories of personal information:

• Contact information, including names, business names, email addresses, telephone numbers and postal addresses.
• Enquiry and project information, including messages, briefs, quotations, feedback, supplied copy, images and other content.
• Account and access information needed to build or manage a website. Clients should use secure sharing methods and should not send passwords through ordinary email where a safer method is available.
• Transaction and billing information, including invoices, payment status and limited payment-related records. Full card details are normally handled by the relevant payment provider rather than HADLY.
• Website and device information, such as IP address, browser type, device information, pages viewed, referral source and cookie preferences, where the website technology or analytics tools collect it.
• Communications and records, including emails, calls, meeting notes, approvals and support requests.

We normally obtain information directly from you. We may also receive it from a colleague within your organisation, a referral partner, publicly available business sources, or a service provider involved in your project.

3. How and why we use information

We use personal information only where UK law permits it. Depending on the circumstances, our purposes and lawful bases are:

• To respond to enquiries and prepare quotations - our legitimate interests in operating and developing HADLY, or steps requested before entering a contract.
• To deliver website design, management and support services - performance of a contract or steps requested before entering one.
• To administer projects, invoices and payments - performance of a contract, legitimate interests, and compliance with tax and accounting duties.
• To secure, maintain and improve our website and services - legitimate interests in protecting systems, diagnosing faults and improving performance.
• To maintain records, establish legal rights and resolve disputes - legitimate interests and legal obligations.
• To send marketing - consent where required, or legitimate interests where the law permits business-to-business marketing. You may opt out at any time.

Where we rely on legitimate interests, we consider whether those interests are proportionate and whether your rights override them. Where consent is the basis, you may withdraw it at any time without affecting earlier lawful processing.

4. Client website data

When HADLY handles personal information solely to build, host, maintain or support a client website, the client will usually be the controller and HADLY may act as its processor. The client remains responsible for its own lawful collection and use of that data. Where appropriate, the quotation, service agreement or a separate data-processing agreement will set out the parties' responsibilities.

5. Sharing information

We may share information only where reasonably necessary with:

• website-building, hosting, domain, email, cloud-storage, analytics, security, backup and technical-support providers;
• payment processors, banks, accountants, professional advisers and insurers;
• contractors or specialist suppliers engaged for a project, subject to appropriate confidentiality and data-protection obligations;
• regulators, courts, law-enforcement bodies or other parties where disclosure is legally required or necessary to protect legal rights; and
• a purchaser or successor if HADLY's business or assets are transferred, subject to appropriate safeguards.

We do not sell personal information.

6. International transfers

Some technology providers may store or access information outside the United Kingdom. Where this occurs, we will use a lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, where required.

7. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting and dispute requirements. As a general guide, enquiry records that do not lead to work may be kept for up to 24 months; project and contractual records may normally be kept for up to 6 years after the relationship ends; and tax or accounting records are kept for the period required by law. Credentials and unnecessary working copies should be deleted or returned when no longer required. A different period may apply where there is a legal claim, safeguarding concern or other justified need.

8. Security

We use reasonable technical and organisational measures designed to protect personal information, including access controls, appropriate passwords, secure services, updates and backups where applicable. No internet transmission or storage system is completely secure, and clients must also protect access credentials and promptly report suspected compromise.

9. Cookies and analytics

hadly.co.uk may use essential cookies needed for the website to operate. Non-essential analytics, advertising or similar cookies will not be used until the appropriate consent mechanism is in place. The website's cookie banner or cookie notice should identify the cookies actually used and allow users to make the choices required by law. This policy must be updated if new analytics, advertising or embedded services are introduced.

10. Your rights

Depending on the circumstances, you may have rights to be informed, access your information, correct inaccurate information, request erasure, restrict processing, object to processing, receive portable data, withdraw consent, and challenge certain automated decisions. These rights are not absolute. To exercise a right, email callum@hadly.co.uk. We may need to verify your identity and will normally respond within one month.

You may also complain to the UK Information Commissioner's Office. Information is available at ico.org.uk. We would appreciate the opportunity to address your concern first.

11. Children

HADLY's services are directed at businesses and adults. We do not knowingly collect children's information through hadly.co.uk. If you believe a child has supplied information, contact us so it can be reviewed and, where appropriate, deleted.

12. Third-party links

Our website may link to websites or services operated by others. Their privacy practices are outside HADLY's control, and users should review the relevant external privacy notices.

13. Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. The current version will be posted on hadly.co.uk with its effective date. Material changes may also be communicated directly where appropriate.