Privacy Policy

HX Automations ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our services.

We are based in Halifax, West Yorkshire, and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

Information You Provide

When you contact us through our website, we collect:

• Your name
• Email address
• Phone number (if provided)
• Business name (if provided)
• Message content

Information Automatically Collected

When you visit our website, we may automatically collect:

• IP address (anonymized)
• Browser type and version
• Device information
• Pages visited and time spent on site
• Referring website

2. How We Use Your Information

We use your personal information to:

• Respond to your enquiries and provide quotes
• Deliver our services to you
• Improve our website and services
• Comply with legal obligations
• Send you relevant information about our services (with your consent)

Legal Basis: We process your data based on:

• Consent: When you submit a contact form
• Contract: When providing services to you
• Legitimate Interests: To improve our website and prevent fraud

3. Cookies and Tracking

We use Google Analytics to understand how visitors use our website. This helps us improve your experience. Google Analytics uses cookies that collect anonymized data.

Cookies we use:

• Essential cookies: Required for the website to function
• Analytics cookies: Google Analytics (anonymized IP)

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service providers: Netlify (hosting), Google (analytics)
• Legal obligations: If required by law or to protect our rights

All third party providers are carefully selected and comply with UK GDPR requirements.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (typically 6 years for business records)
• Resolve disputes

Contact form submissions are kept for 2 years unless you request deletion sooner.

6. Your Rights Under UK GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time

To exercise these rights, contact us using the details below.

7. Data Security

We take security seriously. Our measures include:

• HTTPS encryption for all website traffic
• Secure hosting with Netlify
• Regular security updates
• Limited access to personal data
• Secure password practices

While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

Your data is primarily stored within the UK/EU. Where data is transferred outside the UK/EU, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses
• Adequacy decisions by the UK Government

9. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Significant changes will be communicated via email or website notice.

11. Contact Us

12. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):