1. Who we are

This website is operated by Hirondelle & Co Ltd (trading as Hirondl & Co), a company registered in England & Wales under company number 09006684, with its registered office at 124 Wigmore Street, London W1U 3RY, United Kingdom.

For the purposes of UK GDPR and the Data Protection Act 2018, Hirondelle & Co Ltd is the data controller of personal information collected through this website.

If you have any questions about this policy or how we handle your information, please contact us at contact@hirondl.com.

2. The information we collect

We collect personal information directly from you when you choose to share it with us, and a limited amount of technical information automatically when you use our website.

Information you give us

• Contact and case study enquiries: name, work email, company, job title, and any message you choose to send.
• Booking a call: name, email, and any details you provide via Calendly when scheduling a meeting.

Information collected automatically

• Analytics data (only with your consent): if you accept analytics cookies, Google Analytics 4 records anonymised information about how you use the site, such as pages visited, approximate location (country/city level), device type, and referring source.
• Server logs: our hosting provider (Netlify) records standard request logs, including IP address and user-agent, for security and abuse prevention. These are retained for a short period and are not used for marketing.

We do not collect special category data (such as health, ethnicity, or political views), and we do not knowingly collect information from anyone under the age of 16.

3. How we use your information

We only use your personal information for the purposes set out below, and only where we have a lawful basis to do so under UK GDPR.

Purpose	Lawful basis
Responding to enquiries you send via the contact form, case study form, or email	Legitimate interests (responding to a request you have made)
Scheduling and confirming meetings you book through Calendly	Performance of a contract / your request
Granting access to gated case study content you request	Legitimate interests (delivering the content you asked for)
Measuring website usage via Google Analytics	Your consent (you may withdraw it at any time via the cookie banner)
Maintaining client records and complying with legal, tax and accounting obligations	Legal obligation
Protecting the website from abuse and securing our systems	Legitimate interests (network and information security)

We do not sell your personal information, and we do not send unsolicited marketing communications. We will not use information you submit to enquire about our services for any unrelated marketing without first asking you.

4. Cookies and similar technologies

A cookie is a small text file stored on your device by your browser. We use the smallest possible number of cookies and only set non-essential cookies after you give consent through our cookie banner.

Cookie / storage	Purpose	Type
hirondl-cookie-consent (localStorage)	Remembers your cookie choice so we don't ask you again on every visit	Strictly necessary
Google Analytics (_ga, _ga_*)	Anonymised website analytics, only set if you click Accept	Analytics (consent-based)

You can change your cookie preferences at any time by clicking Manage cookies in the footer of any page. You can also clear cookies through your browser settings.

Embedded services such as Calendly (when you book a call) and HubSpot (when you submit a case study form) may set their own cookies once you actively interact with them. Please refer to their privacy policies for further details.

5. Who we share your information with

We share your information only with carefully selected service providers who help us run our website and respond to you. They process information on our instructions and under written data-processing agreements.

• Netlify, website hosting and request logs.
• Google Analytics (Google Ireland Ltd / Google LLC), anonymised website analytics, only with your consent.
• HubSpot, handles case study form submissions and stores contact details so we can respond.
• Calendly, handles meeting bookings and the information you provide when scheduling.
• Microsoft 365, our business email provider, used to communicate with you.

We may also disclose your information where required to do so by law, by a court order, or to protect our legal rights.

6. International transfers

Some of our service providers are based outside the UK, including in the European Economic Area and the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK GDPR, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework.

7. How long we keep your information

• Enquiry and case study form submissions: up to 24 months from your last interaction with us, unless you become a client.
• Client records and correspondence: up to 7 years from the end of the engagement, in line with our legal, tax and professional obligations.
• Analytics data: retained by Google Analytics for the period set in our GA4 configuration (currently the GA4 default).
• Server logs: retained by our hosting provider for a short period for security purposes only.

You can ask us to delete your information at any time, subject to any legal retention obligations we are required to meet.

8. How we protect your information

We use HTTPS across the entire site, modern security headers (HSTS, CSP, X-Frame-Options), and reputable hosting and CRM providers with their own security certifications. Access to personal information inside Hirondl is restricted to staff who genuinely need it to do their job.

9. Your rights under UK GDPR

You have the following rights in relation to the personal information we hold about you:

• Access, ask for a copy of the personal information we hold about you.
• Rectification, ask us to correct information that is inaccurate or incomplete.
• Erasure, ask us to delete your information where we no longer need it.
• Restriction, ask us to limit how we use your information in certain circumstances.
• Portability, ask to receive your information in a structured, machine-readable format.
• Objection, object to processing based on our legitimate interests.
• Withdraw consent, where we rely on consent (such as for analytics cookies), you can withdraw it at any time without affecting prior processing.

To exercise any of these rights, please email contact@hirondl.com. We will respond within one month of receiving a valid request.

10. Complaints

If you are unhappy with how we have handled your personal information, please contact us first so we can try to put things right. You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The "Last updated" date at the top of this page will tell you when the policy was last revised. We encourage you to review it periodically.