01
Who we are
HGMUK Group Limited (“HGMUK”, “we”, “us” or “our”) is the controller of the personal information covered by this Privacy Policy.
This policy applies across the websites, brands and online services operated by HGMUK, including:
- HGMUKhgmuk.co.uk
- HG Marketing Agencyhgmarketingagency.co.uk
- SortedSocials.cosortedsocials.co
- BuyerPerson.aibuyerperson.ai
- Liverpool Business Finderliverpoolbusinessfinder.co.uk
- LBF Pageslbflocal.co.uk
- HG Learnlearn.hgmuk.co.uk
- Helen Gowar Strategic Consultancyhelengowar.co.uk
HGMUK Group Limited
Company number: 15356755
54 St. James Street
Liverpool, L1 0AB
United Kingdom
Email: [email protected]
02
What this policy covers
This policy explains what personal information we collect; how and why we use it; the lawful bases on which we rely; who we share it with; how long we retain it; your data protection rights; and how to contact us or make a complaint.
It applies when you visit one of our websites, complete a form, subscribe to our communications, purchase something, become a client or otherwise communicate with us.
03
Information we collect
Depending on how you interact with us, we may collect the following information.
Contact information
- Name, email address and telephone number
- Postal or business address
- Company name and job title
Enquiry and form information
- The information included in your message and your answers to form questions
- Details of the services in which you are interested
- Your communication preferences
- Any files or information you choose to provide
Please do not submit sensitive personal information through our forms unless we have specifically asked you to do so.
Client and project information
- Project briefs, requirements, contracts and correspondence
- Account details, meeting notes and service history
- Content, documents and other materials supplied for a project
- Feedback and support requests
Some client materials may contain personal information relating to employees, customers or other individuals. Clients are responsible for ensuring that they are permitted to provide this information to us.
Payment and transaction information
- Billing information, transaction amounts and purchase details
- Payment status, invoices and accounting records
Payments may be processed by Stripe. HGMUK does not normally receive or store your complete payment-card details.
Marketing information
- Your marketing preferences and newsletter subscriptions
- Records of emails sent to you
- Email opens, clicks and similar engagement information, where enabled
- Details of when and how you provided consent
Website and device information
- IP address, browser, device type and operating system
- Approximate location and referring website
- Pages visited, time spent and links selected
- Cookie preferences and other technical or usage information
Where required, analytics and other non-essential cookies will only be used after you have given consent through our cookie controls.
04
How we use your information
We use personal information only where we have a lawful reason to do so.
Responding to enquiries
We use contact and enquiry information to respond to you, provide requested information and discuss our services. Our lawful basis is our legitimate interest in communicating with prospective customers and operating our business. Where an enquiry relates to a potential contract, we may also process information to take steps at your request before entering into that contract.
Providing products and services
We use client, project and contact information to deliver agreed services, manage projects, communicate with clients, provide support and manage our commercial relationships. Our lawful basis is the performance of a contract or taking steps before entering into a contract. In business-to-business relationships, we may also rely on our legitimate interest in managing the relationship with our client’s representatives.
Payments and financial records
We use transaction and billing information to process purchases, issue invoices, maintain accounting records and prevent fraud. Our lawful bases are the performance of a contract, compliance with our legal obligations and our legitimate interest in protecting our business against fraud and non-payment.
Marketing
We may use your contact details to send news, useful resources, offers or information about relevant HGMUK products and services. Where legally required, we rely on your consent. In limited circumstances, we may contact existing customers about similar services where permitted by law and where an opportunity to opt out was provided.
You can unsubscribe at any time using the link in a marketing email or by contacting [email protected].
Website analytics and improvement
With your consent, we use analytics information to understand how visitors use our websites, measure performance and improve our content and services. Our lawful basis is consent. Where cookies or similar technologies are involved, we also obtain consent where required by the Privacy and Electronic Communications Regulations.
Security and legal matters
We may use information to secure our websites and systems; detect misuse or fraud; establish, exercise or defend legal claims; comply with legal, regulatory or tax obligations; and respond to lawful requests from authorities. Our lawful bases are compliance with a legal obligation and our legitimate interest in protecting our business, systems and legal rights.
06
Services we use
We use carefully selected providers to help operate our websites and deliver our services. They may process personal information on our behalf or, in some circumstances, as an independent controller.
Google Analytics
Used with consent to understand website visits and usage. Google may receive your IP address, device information and usage details. Read Google’s Privacy Policy and Google Analytics privacy information.
Tally
Used to provide online forms and collect responses on our behalf. Tally states that form data is stored in Europe and encrypted in transit and at rest. Read Tally’s Privacy Notice.
Stripe
Used to process certain payments. Stripe may collect payment, transaction, device and fraud-prevention information and may act as both processor and independent controller. Read Stripe’s Privacy Policy.
Brevo
Used to manage mailing lists and send emails. Brevo may process your name, email address, preferences and email engagement. Read Brevo’s Privacy Policy.
Baserow
Used to organise and manage business records, which may include enquiry, client, contact or project information. Read Baserow’s Privacy Policy.
We may also use hosting, security, professional advisory, accounting and IT providers where reasonably necessary. We do not sell your personal information.
07
International transfers
Some providers may process or make personal information available outside the United Kingdom. Where information is transferred internationally, we take steps designed to ensure an appropriate level of protection.
Depending on the destination and provider, this may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses or other safeguards permitted by UK data protection law.
Contact [email protected] for further information about safeguards relevant to your information.
08
How long we retain information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and reporting requirements.
- Unsuccessful enquiries: up to two years after our last meaningful communication
- Client and project records: for the relationship and normally up to six years afterwards
- Financial and transaction records: normally six years after the relevant financial year, or longer where legally required
- Marketing information: until you unsubscribe, withdraw consent or it is no longer required
- Suppression records: as long as needed to respect an unsubscribe request
- Analytics information: according to the retention period configured in our analytics service
- Form submissions: according to the form’s purpose and no longer than reasonably necessary
We may retain information for longer where needed for a legal claim, regulatory matter, fraud investigation or legal obligation. When it is no longer required, we delete it, anonymise it or securely restrict its use.
09
How we protect information
We use appropriate organisational and technical measures designed to protect personal information against accidental loss, unauthorised access, alteration, disclosure or destruction.
These measures may include access controls, account security, encryption, secure providers, backups and limiting access to people who need the information for their work. No online system is completely secure, so we cannot guarantee the absolute security of information transmitted over the internet.
10
Your rights
Depending on the circumstances, UK data protection law may give you the right to:
- Ask for a copy of your personal information
- Ask us to correct inaccurate or incomplete information
- Ask us to delete your information
- Ask us to restrict how we use your information
- Object to certain uses of your information
- Receive certain information in a portable format
- Withdraw consent at any time where we rely on consent
- Complain to a data protection regulator
Not every right applies in every situation. We may need to verify your identity before responding.
Your right to object
You have the right to object at any time to the use of your personal information for direct marketing.
You may also object where we rely on legitimate interests. We will stop the relevant processing unless we have compelling legitimate grounds to continue or the information is needed for legal claims.
To exercise your rights, contact [email protected]. You will not normally have to pay a fee. We aim to respond within one month, although the law allows additional time in certain circumstances.
11
Automated decision-making
We do not currently make decisions about individuals based solely on automated processing where those decisions produce legal or similarly significant effects.
12
Children
Our websites and services are primarily intended for businesses and adults. We do not knowingly collect personal information from children through our general websites. If you believe that a child has provided information without appropriate permission, please contact us.
13
Other websites
Our websites may link to websites operated by other organisations. We do not control those websites and are not responsible for their privacy practices. Please read the relevant organisation’s privacy information before submitting personal information.
14
Complaints
If you have a concern about how we use your personal information, please contact us first so that we can try to resolve it.
HGMUK privacy enquiries
[email protected]You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
ico.org.uk/make-a-complaint
15
Changes to this policy
We may update this Privacy Policy when our services, suppliers or legal obligations change. The latest version will be published on our website and the “Last updated” date will be amended.
Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected individuals.