Privacy Policy

1. Introduction

Hare and Tortoise ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://hareandtortoise.agency or use our services.

By using our website or services, you consent to the data practices described in this policy. If you do not agree with the data practices described in this Privacy Policy, you should not use our website or services.

2. Information We Collect

2.1 Information You Provide

We may collect information that you voluntarily provide to us when you:

• Contact us through our contact form or email
• Request a quote or consultation
• Subscribe to our newsletter or updates
• Engage with our services

This information may include your name, email address, phone number, company name, project details, and any other information you choose to provide.

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Date and time of access

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our services
• To respond to your inquiries and provide customer support
• To send you project updates, invoices, and service-related communications
• To send you marketing communications (with your consent, where required)
• To analyse website usage and improve user experience
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal bases:

• Consent: When you have given clear consent for us to process your personal data for specific purposes
• Contract: When processing is necessary for the performance of a contract with you
• Legal obligation: When processing is necessary for compliance with a legal obligation
• Legitimate interests: When processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and conducting our business (e.g., hosting providers, email services)
• Legal Requirements: When required by law or to respond to legal process
• Business Transfers: In connection with any merger, sale of assets, or acquisition of all or a portion of our business
• With Your Consent: When you have given us explicit consent to share your information

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your personal information, we will securely delete or anonymize it.

7. Your Rights (UK GDPR)

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
• Right to Object: You can object to processing of your data for certain purposes
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at hello@hareandtortoise.agency.

8. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your experience. Cookies are small data files stored on your device. You can control cookies through your browser settings, though this may affect website functionality.

We may use cookies for:

• Essential website functionality
• Analytics and performance monitoring
• User preference storage

9. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

This Privacy Policy is effective as of January 29, 2026 and complies with UK GDPR and the Data Protection Act 2018.