Privacy Policy

1. Who we are

This website is operated by HVN Labs Ltd ("HVN Labs", "we", "our" or "us"), company number 15638440, registered office Easton, Sham Castle Lane, Bath, BA2 6JL, United Kingdom. Our working office is Future Space, UWE North Gate, Bristol, BS34 8RB. We are the data controller for the personal data described in this policy.

We are registered with the UK Information Commissioner's Office (ICO), registration number ZC098259. For any privacy question, or to exercise your rights, contact us at info@hvn-labs.com.

2. The law we follow

Our primary framework is the UK GDPR and the Data Protection Act 2018. For visitors in the European Economic Area we also act in line with the EU GDPR, and we respect applicable data protection laws in the other markets we operate in (for example South Africa's POPIA).

3. The personal data we collect

This is a brochure website, so we collect very little:

• Enquiries. If you email us (including via the contact and careers links on this site), we receive your name, email address and whatever you choose to put in your message.
• Usage data. If you consent, we collect standard analytics data about how you use the site (such as pages viewed, approximate location, device and browser) through Google Analytics. See "Cookies" below.

We do not run an online shop or user accounts on this site, and we do not ask for or store payment details, passwords, or special category data through it.

4. How we use it, and our lawful basis

• To respond to your enquiry and stay in touch about it. Lawful basis: our legitimate interests in dealing with messages sent to us (and, where relevant, taking steps at your request).
• To understand and improve the site using analytics. Lawful basis: your consent, given through the cookie banner. You can withdraw it at any time.

5. Cookies

A cookie is a small file a website stores on your device. We use Google Analytics to understand how this site is used. Analytics cookies are only set if you accept them via our cookie banner. If you reject them, or analytics is not currently enabled, no analytics cookies are stored and Google Analytics is not loaded. You can change your choice at any time using the "Cookie settings" link in the footer, or through your browser settings. Enquiries sent by email do not use cookies.

6. Who we share it with

We do not sell your personal data. We share it only with service providers who help us run the site and our communications — for example Google (analytics) and our email and hosting providers — and only as needed for those purposes. We may also disclose personal data where we are required to by law, or to establish, exercise or defend legal claims.

7. International transfers

Some of our providers (including Google) operate outside the UK, so your data may be transferred to and processed in other countries, including the United States. Where we transfer personal data outside the UK, we rely on a transfer mechanism permitted under Chapter V of the UK GDPR — such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework where the recipient is certified under it (as Google is) — so your data keeps an equivalent level of protection.

8. How long we keep it

We keep enquiry emails only for as long as needed to deal with your enquiry and our relationship with you, and for a reasonable period afterwards, then delete them. Analytics data is retained in line with our Google Analytics retention settings. We will not keep personal data for longer than necessary or than the law requires.

9. How we keep your data safe

We have appropriate organisational and technical measures in place to protect your personal data from being lost, misused, accessed without authorisation, altered or disclosed. The connection between your browser and this site is encrypted. We require any third party that processes personal data on our behalf to keep it secure and to handle it in line with the law. If a personal data breach occurs, we will notify you and the ICO where we are legally required to.

10. Your rights

Under the UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• have your data erased ("right to be forgotten");
• restrict or object to our processing of your data;
• data portability; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these, email us at info@hvn-labs.com. We may ask you to verify your identity first, and we will respond within the time the law allows (normally one month).

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; helpline 0303 123 1113; ico.org.uk. We would appreciate the chance to address your concerns first.

11. Children

We do not knowingly collect personal data from children under the age of 16.

12. Changes

We may update this policy from time to time. When we do, we will post the updated version on this page and change the "Last updated" date above.

13. Contact us

For any privacy question, to exercise your rights, or to ask us to delete your data, email info@hvn-labs.com.

Or write to: Data Protection, HVN Labs Ltd, Future Space, UWE North Gate, Bristol, BS34 8RB, United Kingdom.