Legal

Privacy Policy

Last updated:

Hiddenite Limited ("Hiddenite", "we", "us", "our") is committed to protecting your personal data. This policy explains how we collect, use, store, and protect information you provide when using our website at hiddenite.uk and any related services. Please read it carefully.

1. Who we are

Hiddenite Limited is registered in England and Wales. We are the data controller for personal data collected through this website. For any data protection enquiries, contact us at [email protected].

2. What data we collect

We may collect the following categories of personal data:

  • Identity data: full name, company name
  • Contact data: email address, telephone number, postal address
  • Technical data: IP address, browser type and version, time zone, operating system
  • Usage data: pages visited, referral sources, session duration
  • Communications data: content of messages sent via our contact form or email
  • Transaction data: details of services you purchase from us

We do not collect any special category data (such as health, ethnicity, or biometric data) and we do not collect data from children under 16.

3. How we collect your data

  • Directly from you via our contact form, email, or telephone
  • Automatically via cookies and similar technologies when you browse our website
  • From third parties such as analytics providers (Google Analytics) with your consent

4. How we use your data

We use your data for the following purposes, each supported by a lawful basis:

Responding to your enquiries and providing quotes Legitimate interests / Pre-contractual steps
Delivering the services you have contracted us to provide Contract performance
Sending transactional emails (invoices, project updates) Contract performance
Improving our website and services using analytics Legitimate interests (with consent for cookies)
Complying with legal and regulatory obligations Legal obligation
Sending marketing communications (only with your explicit consent) Consent

5. Data sharing

We do not sell your personal data. We may share it with:

  • Our service providers who process data on our behalf (e.g. email delivery, cloud hosting) under appropriate data processing agreements
  • Professional advisors such as accountants and lawyers under duties of confidentiality
  • Regulatory authorities or law enforcement where required by law

Where we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

6. Data retention

We retain personal data only as long as necessary for the purposes collected, or as required by law. Contact enquiries are retained for 3 years. Client project data is retained for 7 years for legal and financial compliance. You may request deletion at any time (see Your Rights below).

7. Cookies

Our website uses cookies to improve your experience. Essential cookies are required for the site to function and do not require consent. Analytics and marketing cookies require your explicit consent via our cookie banner. You can manage your cookie preferences at any time via our Cookie Settings page. See our full Cookie Policy for details.

8. Your rights under UK GDPR

You have the following rights over your personal data:

  • Right of access: request a copy of personal data we hold about you
  • Right to rectification: request correction of inaccurate data
  • Right to erasure: request deletion of your data ("right to be forgotten")
  • Right to restrict processing: ask us to limit how we use your data
  • Right to data portability: receive your data in a structured, machine-readable format
  • Right to object: object to processing based on legitimate interests or direct marketing
  • Right to withdraw consent: at any time where processing is based on consent

To exercise any right, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or alteration. These include encryption in transit (TLS), access controls, and regular security reviews. No internet transmission is completely secure, but we take all reasonable precautions.

10. Third-party links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their privacy policies.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified via a notice on our website. The "last updated" date at the top of this page will always reflect the most recent version.

12. Contact us

For any questions about this policy or how we handle your data, please contact:

Data Controller: Hiddenite Limited
Email: [email protected]
Post: 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE