This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or get in touch with us. We are committed to handling your information transparently and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are (Data Controller)
This website (horizonhalo.uk) is operated by Contentandco Ltd, which is the data controller responsible for your personal data:
- Contentandco Ltd
- Registered in England & Wales, Company No. 17309993
- Registered address: 7a Durham Drive, Jarrow, NE32 4TB
- Email: [email protected] · Phone: +44 7882 521 009
2. How to contact us about your data
For any question about this policy or to exercise your rights, contact us by email at [email protected] or in writing at the registered address above. We respond to all data requests within 30 days.
3. What personal data we collect
We only collect what we need to respond to you and run our website:
- Enquiry data — when you complete our contact form: your name, email address, and the message you send us (which may include company or project details you choose to share).
- Communications data — the content of emails and phone calls when you contact us directly.
- Technical data — our website does not currently run analytics or advertising trackers. Standard server logs held by our hosting provider may temporarily record your IP address and browser type for security and to serve the page.
- Consent data — your cookie preference is stored locally in your browser (see our Cookie Policy).
4. Why we use your data and our lawful basis
Under Article 6 of the UK GDPR we rely on the following lawful bases:
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to your enquiry and providing a quote | Name, email, message | Legitimate interests / steps prior to a contract |
| Delivering our services once engaged | Contact & project data | Performance of a contract |
| Keeping records for tax and legal reasons | Invoice & contact data | Legal obligation |
| Optional analytics (only if enabled in future) | Usage data | Consent |
5. How long we keep your data
- Enquiries that don't become clients — up to 24 months, then deleted.
- Client and financial records — 6 years after the end of our engagement, to meet UK tax and accounting law.
- Cookie consent preference — until you clear it in your browser.
6. Who we share your data with
We do not sell your personal data, and we never share it for third-party marketing. We use a small number of trusted service providers who process data on our behalf:
- Web hosting provider — stores and serves this website and its server logs.
- Email provider — handles the emails you send and our replies.
- Google Fonts — serves the site's typography; your IP address is processed to deliver font files. Google Fonts sets no persistent cookies.
We may also disclose data where required by law, regulation, or a valid legal request.
7. International transfers
Our core data (enquiries and email) is held within the UK/EEA. Where a provider such as Google Fonts processes limited technical data outside the UK, that transfer is protected by an adequacy decision or Standard Contractual Clauses (SCCs) with appropriate safeguards.
8. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data (rectification);
- Request erasure of your data (the "right to be forgotten");
- Restrict or object to our processing;
- Data portability — receive your data in a portable format;
- Withdraw consent at any time where we rely on it.
9. Withdrawing consent
Where we rely on consent (for example, if optional analytics is ever enabled), you can withdraw it at any time by clearing your cookie preference in your browser or by emailing us. Withdrawing consent does not affect processing carried out before withdrawal.
10. How to exercise your rights
Email [email protected] with your request. We may ask you to verify your identity. We will respond within 30 days, free of charge in most cases.
11. Complaints — the ICO
If you are unhappy with how we have handled your data, you can complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at www.ico.org.uk. We would appreciate the chance to resolve your concern directly first.
12. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top always reflects the current version.