Privacy Policy

Effective from: 22nd May 2018

Your Privacy

Our Website adheres to all legal requirements to protect your privacy. This Privacy Policy is a legal statement that explains when, where, why and how we collect, use and store your personal data when you view, use or interact with our website.

Definitions

Personal Data: Any information regarding a natural person, a legal person, an institution or an association, which is, or can be, identified, even indirectly, by reference to any other information, including a personal identification number.

Usage Data: Information collected automatically from this website (or third-party services employed in this website), which can include: the IP addresses or domain names of the computers utilised by the Users who use this website, the URI addresses, the time of the request, the method utilised to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer, the country of origin, the features of the browser and the operating system utilised by the User, the various time details per visit, the details about the path followed within the website, and other parameters about the device operating system and/or the User’s IT environment.

User: The individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.

Data Controller: Means a natural or legal person who determines the purposes for which and the manner in which any personal data are processed. For the purpose of this Privacy Policy, we are a Data Controller of your data.

Data Processors (or Service Providers): Any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.

Data Subject: Any living individual who is the subject of Personal Data.

GDPR: General Data Protection Regulation (EU) 2016/679.

Website: The hardware or software tool by which the Personal Data of the User is collected.

Cookies: Small pieces of data stored on a User’s device.

1. Summary

Data Controller: Data Protection Lead, Harrier Gates Limited, The Dairy, Tilehouse Farm Offices, East Shalford Lane, Shalford, Guildford, GU4 8AE.

How we collect or obtain information about you:

When you provide it to us (e.g. by contacting us, placing an order, booking an appointment, using our chat system, browsing products, or signing up to our newsletter).
From your use of our website (cookies, analytics).
Occasionally from third parties.

Information we collect: Name, contact details, payment information (credit/debit card details), usage data including IP address, cookies, device and browser type, site usage, geographical location, company name, business name, VAT number (if applicable).

How we use your information:

Administrative and business purposes (contact, process orders, improve business and website, fulfil contractual obligations, advertise goods and services, analyse website use, legal rights/obligations).
Notify you about changes to business, products, and services.
Provide customer support.
Gather analysis to improve our service and products.
Monitor website usage and detect/prevent/address technical issues.
Provide you with news, offers, and information about similar goods, services, and events (opt-in/opt-out per GDPR).

Disclosure to third parties: Only as necessary to run business, to service providers, fulfil contracts, legal compliance, enforce legal rights.

Business Transaction: If we are involved in a merger, acquisition, or asset sale, your data may be transferred.
Law Enforcement: Disclosure may be required by law or in response to requests by public authorities.

Do we sell your information? No.

Consequences of not supplying data: To place an order we require email, billing/shipping address, company name and VAT number (if applicable). Usage data not mandatory. Cookies may be refused in your browser.

Retention: No longer than necessary, considering legal obligations, consent, contracts, and legitimate interests. See section 12 for details.

Security: Secure servers, SSL encryption, restricted access. Site uses COMODO CA Limited SSL.

Cookies: Used for essential, functional, analytical, and targeting purposes. See Cookies Policy.

Transfers outside EEA: Only if required by law.

Profiling: Used for promoting content via ads, web analytics, and cookies. No automated decision-making.

GDPR Rights: Access, correction, deletion, restriction, portability, objection, withdraw consent, no automated decisions, complain to authority.

Sensitive data: Not collected. Do not submit.

Legal basis for processing: Contract, consent, legitimate interests, payment processing, legal compliance.

2. Our data controller contact details

The data controller DPO of Harrier Gates Limited, The Dairy, Tilehouse Farm Offices, East Shalford Lane, Shalford, Guildford, GU4 8AE.

Email: info@harriergates.co.uk

If you have any questions about this Privacy Policy, please contact the data controller.

3. Information collected: Website visit

Web server logs: Hosted by 20i Ltd (privacy policy available on their site). Automatically logs IP, pages accessed, requests, referrer, browser/OS. Server located in the UK (EEA).

Use for IT security: Logs analysed to prevent unauthorised access, malware, denial of service, cyber attacks. Not used to identify you unless investigating suspicious activity.

Legal basis: Compliance with legal obligation (GDPR Art. 6(1)(c)) and legitimate interests (GDPR Art. 6(1)(f)).

Use for analysis: Logs may be used to analyse website usage and improve performance. Legal basis: legitimate interests.

Cookies: Essential, functional, analytical, targeting cookies used. Can be rejected in browser settings. See Cookies Policy.

Analytics & tracking: Used to understand site use and improve UX. Data anonymous.

4. Information collected: Contact us

Email: We collect your email and other details in your message/signature.

Legal basis: Legitimate interests (responding to enquiries) and contract (if relating to goods/services).

Storage: Third-party providers (Google Mail, Microsoft, 20i Ltd). Data stored within EEA or occasionally outside (redundancy). See Data Transfers section.

Contact form: Collects name, email, IP. Stored within EEA on 20i Ltd servers.

Phone: We collect your number and details of the call. Not recorded. Stored by UK service provider.

Post: We collect any details you provide in postal communications.

5. Information collected: Website interaction

Registration: When creating an account, we collect:

Device/visit info (IP, location, browser, referral source, session length, page views).
Transaction details (name, email, postal address, phone).
Information for subscriptions, reviews, appointments, chat service.

Legal basis: Contract necessity (GDPR Art. 6(1)(b)). Required to provide account access to purchased services.

Storage: Stored in the UK on 20i Ltd servers.

6. Information collected: Place order

Mandatory: Name, email, billing/shipping address, company name, VAT number. Required to complete transactions.

Legal basis: Contract (to identify and contact you, issue receipts, confirm orders) and compliance with legal obligation (e.g. VAT invoicing, accounting records).

Optional: Phone number, referral source.

7. Information collected: Third parties

Generally, we do not receive information about you from third parties. In some cases, third parties may provide us with information about you.

Information obtained: Typically name and contact details, but may include additional information. May come from publicly accessible sources (databases, directories, media, social media, websites).

Legal bases:

Contract (GDPR Art. 6(1)(b)): Where information is shared with us for the purpose of providing services.
Consent (Art. 6(1)(a)): Where you have explicitly requested sharing.
Legitimate interests (Art. 6(1)(f)): Where we pursue business interests or investigate infringements.

8. Profiling

Definition: Automated processing of information to evaluate personal aspects such as preferences, behaviour, or location.

Use of profiling: Google Analytics collects location (via IP) and behaviour (via cookies). We only process if you consent to cookies.

Logic: Analyses data to understand user behaviour, improve site content, and target marketing.

Reason: To tailor advertising and improve services. Cookies track and store device and behaviour info. Ads may be targeted accordingly.

9. Displaying content from external platforms

Services that allow embedding of third-party content on our website. These may collect usage data and cookies.

Vimeo widget: Provides video content and buttons. Data: cookies, usage data. Place: US.
Google Maps widget: Map display. Data: cookies, usage data. Place: US.

10. Platform services

Hosting and running key website components, often distributed geographically.

Google Analytics: Collects IP addresses, cookie info. Data stored in the US. Used to analyse usage and improve site. Legal basis: legitimate interests (business operations). Opt-out available via browser plugin.

11. Disclosure and additional uses of your information

Insurers: Information shared upon an official claim.

Legal disclosure: Information may be shared with competent authorities (e.g. Police) or in legal disputes, or to comply with regulations.

Legal basis: Legitimate interests (preventing crime, fraud, enforcing rights, compliance with laws).

12. Data retention: Personal data

We use your data to provide services, meet legal obligations (e.g. tax), invoice, and track payments.

Retention periods:

General relationship: duration of relationship + 2 years.
Financial records: 6 years (for tax purposes).
Otherwise: retained only as long as necessary, considering purpose, legal obligations, consent, value, risk, accuracy, and circumstances.

13. Data security: Personal data

We take appropriate technical and organisational measures to secure your information and protect it against unauthorised or unlawful use and accidental loss or destruction. These include:

Sharing/providing access only to the minimum extent necessary, under confidentiality where appropriate, anonymised where possible.
Verifying identity before granting access to information.
Encrypting information using Secure Sockets Layer (SSL) software for forms and payments.
Transferring information only via closed systems or encrypted transfers.

Email transmission: Internet transmission is not fully secure. If you send us information via email or online, you do so at your own risk. We are not responsible for any costs, loss, or damage resulting from this choice.

14. Data Transfers outside the European Economic Area

Information is stored in the UK (EEA). We do not intend to transfer your information outside the EEA, except where legally required. If transfers occur, appropriate safeguards will be in place.

Contact form: Stored within the UK on 20i Ltd servers.

Email: Stored in the UK, Ireland, or Belgium. Google and Microsoft may also store data outside the EEA for redundancy. Google and Microsoft comply with the EU-U.S. Privacy Shield.

Google Analytics: Data transferred to US servers. Google self-certifies under the Privacy Shield.

You have the following rights, which you can exercise by writing to Data Protection Lead, Harrier Gates Limited, The Dairy, Tilehouse Farm Offices, East Shalford Lane, Shalford, Guildford, GU4 8AE, or emailing info@harriergates.co.uk

Access to your information and details of its use.
Correction or deletion of your information.
Restriction of processing.
Receive your data in portable format (CSV) and transfer to another controller.
Object to processing for certain purposes.
Withdraw consent where applicable (lawfulness of prior use remains).

Complaints: You may complain to a supervisory authority, such as the Information Commissioner’s Office (ICO) in the UK.

Further guidance is available at: ICO GDPR Individual Rights, ICO Public Guidance, ICO Complaints.

Identity verification: We are legally required to verify your identity before granting access to your data.

16. The right to restrict processing

You may object to processing of your information where:

It is used to carry out a task in the public interest or our legitimate interests, including profiling.
It is used for direct marketing purposes (including profiling for direct marketing).

You may exercise this right by:

Clicking the unsubscribe link in marketing emails.
Emailing info@harriergates.co.uk with “OPT OUT”.

For cookie-based tracking objections, see the Cookies Policy (“How to accept or reject cookies”).

17. Sensitive Personal Information

We do not knowingly collect sensitive personal information (racial/ethnic origin, political opinions, religion, trade union membership, genetics, biometrics, health, sex life, sexual orientation).

If you submit sensitive information, you are deemed to have explicitly consented (GDPR Art. 9(2)(a)). Such information will be deleted after processing.

18. Privacy Policy Updates

We periodically update this Privacy Policy.

Minor updates: Effective date updated at the top of the policy.
Major updates: We will notify you by email or on our website, explaining the reason for the change.

19. External Links

We are not responsible for external websites not owned by us. If you click on a third-party link, you will be directed to their site. You should review their privacy policy.

20. Children’s Data Privacy Compliance

We comply with the Children’s Online Privacy Protection Act (COPPA). We do not knowingly collect data from persons under 18. If we become aware of such collection, we will obtain parental consent or delete the data. If you believe a person under 18 has engaged with us, please email us.

21. DNT (Do Not Track) Disclosure: The California Online Privacy Protection Act

“Do Not Track” is a browser privacy setting requesting websites not to track users. For more information see www.allaboutdnt.org.

We currently do not respond to DNT settings or signals. Note that your activity may still be monitored via pixels and web beacons. To opt out, see our Cookies Policy.

22. How to contact us

If you have questions about this Privacy Policy or data protection, contact:
Data Protection Lead
Harrier Gates Limited
The Dairy, Tilehouse Farm Offices,
East Shalford Lane, Shalford,
Guildford, GU4 8AE
Email: info@harriergates.co.uk
Phone: +44 (0) 1483 379954

23. Your right to complain

You have the right to complain to a supervisory authority about how we process your personal data.

UK Supervisory Authority: Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Phone: 0303 123 1113
Website: https://ico.org.uk/concerns/