Privacy policy

When you submit our contact form, we collect:

• Your name
• Your corporate email address
• Your business name
• Any additional information you choose to include in your message

When you visit our Website, we automatically collect certain technical information through
website analytics, performance monitoring, and search visibility tools. This may include:

• IP address (may be anonymized or partially masked, depending on the tool used)
• Browser type and version
• Device type
• Pages visited and time spent on the Website
• Referring website or search terms that led you to our Website
• General geographic location (country/region level)
• Technical error data, if the Website malfunctions during your visit

We do not knowingly collect any sensitive personal data (such as health, financial, or biometric
information) through the Website.

Under the UK GDPR and EU GDPR, we process your personal data only when we have a lawful basis
to do so. The legal bases we rely on include:

• Consent — You have given clear consent for us to process your personal data for a specific
  purpose (e.g., accepting non-essential cookies).
• Contractual necessity — Where you book a consultation or request a proposal, we process
  your personal data to take the steps you have requested prior to entering into a contract
  with us, and, where a contract is subsequently formed, to perform that contract.
• Legitimate interests — Processing is necessary for our legitimate interests (e.g., improving our
  services, website analytics, fraud prevention), provided these interests are not overridden
  by your rights.
• Legal obligation — Processing is necessary to comply with a legal obligation to which
  we are subject.

We use personal data for the following purposes:

• Responding to inquiries submitted via our contact form
• Understanding how visitors use our Website and improving its performance and content
• Identifying and resolving technical issues on the Website
• Monitoring and improving our Website's visibility in search engines
• Ensuring the Website remains accessible, secure, and functional
• Complying with our legal and regulatory obligations

We may engage third-party companies and service providers to help us operate, maintain,
and improve the Website, perform Website-related tasks, or analyze how the Website is used.
These providers only have access to your personal data to the extent necessary to perform their
designated tasks on our behalf, and are contractually obligated not to disclose or use your data
for any other purpose.

Categories of service providers we use include:

• Analytics providers — to monitor and analyze Website usage and performance
• Error monitoring providers — to detect and diagnose technical issues on the Website
• Search visibility and SEO tools — to monitor how the Website appears in search engine
  results
• Uptime and hosting monitoring providers — to ensure the Website remains accessible
  and operational
• Website auditing tools — to identify technical or structural issues on the Website

Some of the third-party service providers described in the "Third-party service providers" section
may be located outside the United Kingdom. Where your personal data is transferred outside
the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses
or reliance on an adequacy decision, in accordance with UK data protection law.

In addition to sharing personal data with the third-party service providers described
in "Third-party service providers" section, we may disclose your personal data
in the following circumstances:

• To comply with a legal obligation
• To protect and defend our rights or property
• To prevent or investigate possible wrongdoing in connection with the Website
• To protect the personal safety of users or the public
• To protect against legal liability

We do not sell your personal data to third parties.

We retain personal data collected through the contact form for as long as necessary to respond
to your inquiry and for a reasonable period thereafter for record-keeping purposes, unless
a longer retention period is required by law or necessary to establish, exercise, or defend
legal claims.

Technical and analytics data collected automatically is retained in accordance with the default
retention periods of the respective tools we use, as configured by us.

If you are located in the United Kingdom or European Economic Area, you have the following rights
regarding your personal data:

• Right of access — Request a copy of the personal data we hold about you.
• Right to rectification — Request correction of inaccurate or incomplete data.
• Right to erasure — Request deletion of your personal data, subject to legal obligations.
• Right to restrict processing — Request that we limit how we use your data.
• Right to data portability — Receive your data in a structured, machine-readable format.
• Right to object — Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — Where processing is based on consent, you may withdraw
  it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint — You have the right to lodge a complaint with a supervisory
  authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at [email protected]. We will respond within
one month of receiving your request.

If you are a resident of California or another US state with applicable privacy legislation
(including the CCPA/CPRA, Virginia VCDPA, Colorado CPA, and Connecticut CTDPA), you may have
additional rights, including:

• Right to know — Request information about the categories and specific pieces of personal
  data we have collected.
• Right to delete — Request deletion of your personal data, subject to certain exceptions.
• Right to opt out — Opt out of the sale or sharing of your personal data. We do not sell
  personal data.
• Right to non-discrimination — We will not discriminate against you for exercising your
  privacy rights.

To exercise these rights, contact us at [email protected].

We implement appropriate technical and organizational measures to protect personal data
against unauthorized access, loss, misuse, or alteration. However, no method of transmission
over the internet or electronic storage is completely secure, and we cannot guarantee
absolute security.

Our Website is intended for business and professional use and is not directed at individuals under
the age of 18. We do not knowingly collect personal data from minors.

We may update this Privacy policy from time to time to reflect changes in our practices or legal
requirements. The updated Policy will be posted on this page with a revised "Updated" date.

If you have any questions about this Privacy policy or how we handle your personal data, please
contact us at:

Hue & Machine LTD
175 Darkes Lane, Brosnan House, Suite 2B, Potters Bar, EN6 1BW
England, United Kingdom

Email: [email protected]