Privacy Policy

1 Who we are

The data controller for this website is:

Humphreys Greenhalgh Legacy Collective CIC
Company Number: 16768368
Registered in England and Wales
Email: hello@hglcollective.com

As data controller we are responsible for deciding how and why your personal data is processed. We are committed to handling it lawfully, transparently, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2 What data we collect

This website is informational. We collect personal data only when you actively choose to provide it — through our contact form. We do not run analytics tools, tracking pixels, or advertising scripts on this site.

Contact form

When you submit our contact form, we collect:

• Your first and last name
• Your email address
• Your phone number (optional — only if you choose to provide it)
• Your organisation name (optional — only if you choose to provide it)
• The nature of your enquiry
• The content of your message

3 How we use it

We use the information you provide solely to:

• Respond to your enquiry
• Follow up on partnership, volunteering, or funding discussions you have initiated
• Keep a record of correspondence for our own administrative purposes

We will not use your contact details to add you to a mailing list, send marketing communications, or share your information with third parties for their own use — without your explicit consent.

4 Our legal basis for processing

Under UK GDPR we must have a lawful basis for processing personal data. Our legal bases are:

• Legitimate interests — responding to enquiries you have sent to us. It is in both your interest and ours to communicate about your enquiry, and we have assessed that this does not override your rights and freedoms.
• Consent — where you have specifically asked to be kept informed about project developments. You may withdraw this consent at any time by emailing us.

5 Who we share your data with

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

Formspree

Our contact form is processed by Formspree (formspree.io), a third-party form handling service. When you submit the form, your data passes through Formspree's servers before being delivered to us by email. Formspree acts as a data processor on our behalf. Their privacy policy is available at formspree.io.

Cloudflare

This website is served through Cloudflare, which provides security and performance services. Cloudflare may process technical data about web traffic (such as IP addresses) as part of its standard service. Their privacy policy is available at cloudflare.com/privacypolicy.

Legal obligation

We may disclose personal data if required to do so by law, or in response to a valid request from a regulatory authority or law enforcement agency.

6 How long we keep your data

We keep contact form enquiries for as long as reasonably necessary to respond to and follow up on your enquiry — typically no longer than 24 months from the date of your last contact with us.

If your enquiry leads to an ongoing relationship (for example a partnership or volunteering arrangement), we will retain relevant correspondence for the duration of that relationship and for a reasonable period afterwards.

You may ask us to delete your data at any time — see Your Rights below.

7 Your rights

Under UK GDPR you have the following rights in relation to your personal data:

To exercise any of these rights, email us at hello@hglcollective.com. We will respond within one calendar month.

If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8 Cookies

This website currently uses only essential technical cookies. We do not use advertising, tracking, or analytics cookies. Full details are in our Cookie Policy.

9 Third-party links

This website may contain links to external sites — for example Companies House, the National Lottery Heritage Fund, or partner organisations. Once you leave our site, this Privacy Policy no longer applies. We are not responsible for the privacy practices of external websites and encourage you to read their own policies.

10 Changes to this policy

We may update this Privacy Policy from time to time — for example as the website develops, when the Voices of the UK platform launches, or if legal requirements change. The date shown in the sidebar indicates when this policy was last updated.

11 Contact us

For any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data: