Privacy Policy

01Who we are

Haylett Discovery Ltd (“we”, “us”) is a company registered in England and Wales, company number 16578426. We are the data controller for personal information described in this notice.

02Information we collect

This website does not currently include contact forms, account logins, or analytics tracking. Personal information therefore reaches us mainly because you choose to send it. We may hold:

• Enquiry information — your name, email address, organisation and anything you include when you email us.
• Project information — contact details, correspondence, briefs and materials shared with us during an engagement.
• Business records — invoicing and payment details, and records we must keep for accounting and tax purposes.
• Technical information — our hosting provider may process standard server information such as IP address, browser type and request time, as part of delivering and securing the website.

We do not seek special category data. Please do not send sensitive personal information by email unless we have agreed a secure method with you.

03How we use information

• To reply to enquiries and discuss possible work.
• To provide, manage and deliver design services under a contract.
• To issue invoices, take payment and keep accurate financial records.
• To keep the website available, secure and working correctly.
• To meet legal, regulatory and accounting obligations.

We do not sell personal information, and we do not use it for automated decision-making or profiling.

04Lawful bases for processing

• Legitimate interests — responding to enquiries, running and securing our business, and maintaining ordinary business records, where this does not override your rights.
• Contract — steps taken at your request before entering a contract, and performance of a contract for design services.
• Legal obligation — retaining accounting and tax records as required by law.
• Consent — where we ask for it specifically, for example if we later introduce optional analytics or a mailing list. Consent can be withdrawn at any time.

05Sharing information

We share personal information only where it is necessary, and only with organisations that act on documented instructions or under their own legal duty:

• Our website hosting and email providers.
• Our accountant and, where relevant, HMRC or other authorities.
• Trusted collaborators or suppliers engaged on a specific project, where you have been told or would reasonably expect it.
• Professional advisers, or where disclosure is required by law.

Some providers may process data outside the UK. Where that happens, we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or Addendum.

06Storage, retention and security

Information is held in reputable business email, storage and accounting services protected by access controls, encryption in transit and multi-factor authentication where available. Access is limited to those who need it.

We keep enquiry correspondence for up to two years if no engagement follows. Project records are normally kept for the duration of the engagement and up to six years afterwards, in line with accounting and limitation-period requirements. Information is then deleted or securely disposed of.

07Cookies and analytics

This website does not set advertising or tracking cookies, and it does not run analytics software. Any cookies used are strictly necessary for the site to function and to keep it secure.

If we later add analytics, embedded media, a contact form, a booking tool, chat, a mailing list, or any other third-party service, this policy must be updated before or at the point that service goes live — stating what is collected, the lawful basis, any international transfer, and, where the service is not strictly necessary, a cookie consent mechanism must be presented before those cookies are set.

08Your rights

Under UK data protection law you have the right to:

• Be informed about how your information is used.
• Request access to a copy of the information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to erase information where there is no ongoing reason to keep it.
• Ask us to restrict processing, or object to processing based on legitimate interests.
• Request portability of information you provided to us, in certain circumstances.
• Withdraw consent at any time where processing relies on consent.

To exercise any of these rights, email Enquires@Haylettdiscovery.com. We will respond within one month. There is normally no charge.

09Contact and complaints

Please contact us first if you have a concern — we would rather put something right quickly. You also have the right to complain to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or via ico.org.uk.

10Updates to this policy

We review this notice periodically and whenever the way we handle information changes — in particular if analytics, forms, payment tools, embedded content or other third-party services are added to this website. The review date at the top of the page shows when it was last checked.