Privacy Policy
Last updated: June 2026
Hazelrigg Enterprises Ltd ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you visit hazelriggenterprises.co.uk or contact us. It is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Hazelrigg Enterprises Ltd
Registered office: Suite 2.05, Swans Centre for Innovation, Station Road, Wallsend, Tyne and Wear, NE28 6EQ
Trading address: Port of Blyth, Wimbourne Quay, Regents Street, Blyth, Northumberland, NE24 1PX
Email: info@hazelriggenterprises.co.uk
Telephone: 0333 772 3903
We are registered as a data controller with the UK Information Commissioner's Office (ICO).
ICO Registration Number: ZB971478
You can verify this registration at ico.org.uk/ESDWebPages/Search.
2. What Personal Data We Collect
- Contact enquiries: name, email address, phone number, message content
- Newsletter subscriptions: email address and consent record
- Website usage data: IP address, browser type, pages visited, time on site — collected via Google Analytics 4 (consent required)
- Technical data: cookies as described in our Cookie Policy
We do not collect sensitive personal data (such as health, financial, or biometric data).
3. How We Use Your Personal Data
| Purpose | Legal Basis | Retention |
|---|---|---|
| Responding to enquiries | Legitimate interests / Contract | 3 years from last contact |
| Sending marketing emails / newsletters | Consent (opt-in checkbox) | Until you unsubscribe |
| Website analytics (Google Analytics 4) | Consent (analytics cookie acceptance) | 26 months |
| Security and fraud prevention | Legitimate interests | 90 days |
| Legal compliance | Legal obligation | As required by law |
4. Who We Share Your Data With
We do not sell your personal data. Third-party processors we use:
- Supabase Inc. — database platform storing contact form submissions and newsletter subscriptions. EU-hosted. Supabase Privacy Policy
- Google LLC — Google Analytics 4 (analytics cookies, consent required). Data may be transferred to the USA under Standard Contractual Clauses. Google Privacy Policy
- Vercel Inc. — website hosting provider, processes server logs as part of hosting. Vercel Privacy Policy
- Legal and regulatory authorities — where required by law or legal proceedings
All third-party processors are subject to contractual obligations to protect your data.
5. International Transfers
Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards (Standard Contractual Clauses or adequacy decisions) are in place in accordance with UK GDPR.
6. Cookies
We use cookies and similar technologies on our website. For full details see our Cookie Policy.
7. Your Rights Under UK GDPR
- Access — request a copy of personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to legal retention requirements)
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests or for direct marketing
- Withdraw consent — at any time, without affecting the lawfulness of prior processing
To exercise any right, contact info@hazelriggenterprises.co.uk. We will respond within 30 days.
8. Right to Complain
If you are unhappy with how we handle your personal data, you may lodge a complaint with the ICO:
ico.org.uk/make-a-complaint | 0303 123 1113
9. Data Security
We use HTTPS encryption, access controls, and row-level database security to protect your personal data. No internet transmission method is 100% secure, and we cannot guarantee absolute security of data sent over the internet.
10. Children
Our website is not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently done so, contact us and we will delete it promptly.
11. Changes to This Policy
We may update this policy from time to time and will revise the "Last updated" date. Significant changes will trigger a new consent prompt via the cookie banner.