Privacy notice

H Change Ltd is a cyber security consultancy registered in England and Wales.

Company number: 14453739

For questions about this notice or how we use personal information, contact email@hchange.co.uk.

If you request a consultation or send an enquiry through this website, we may collect:

• your name
• work email address
• organisation
• the service or topic you want to discuss
• information you choose to include in your message
• the date and time of your submission

Please do not submit passwords, sensitive security information or incident evidence through our website forms.

Our hosting infrastructure may also process technical information needed to deliver and protect the website, such as IP addresses, browser information, pages requested and request times.

We use information submitted through the website to:

• respond to enquiries
• arrange requested consultations
• understand the support you may require
• communicate with you about a potential or existing business relationship
• operate, maintain and protect our website and services

We do not use information submitted through these forms for automated decision-making or profiling.

Where you contact us about our services, we generally process your information because it is necessary for our legitimate interests in responding to enquiries and operating our business, or to take steps at your request before entering into a contract.

Where another lawful basis is required for a particular activity, we will apply it as appropriate.

Information submitted through our consultation and enquiry forms is sent directly to email@hchange.co.uk.

The website does not maintain a separate database of form submissions.

Where an enquiry does not result in a client relationship, we will normally retain the relevant correspondence for up to 12 months after the last meaningful contact, unless there is a reason we need to keep it for longer.

If you become a client, information relating to the engagement may be retained for different periods where necessary for contractual, financial, legal, regulatory or legitimate business purposes.

Technical information processed by our hosting infrastructure may be retained according to the operational and security requirements of the relevant hosting services.

We do not sell your personal information.

Information may be processed by service providers that support the operation of our website, email and business systems where this is necessary to provide those services. We may also disclose information where required by law or where necessary to establish, exercise or defend legal rights.

We expect service providers handling personal information on our behalf to apply appropriate safeguards.

Some technology providers may process information outside the UK. Where this applies, we take appropriate steps to ensure personal information is protected in accordance with applicable data protection requirements.

Depending on the circumstances, UK data protection law gives you rights over your personal information. These may include the right to:

• request access to your personal information
• ask us to correct inaccurate information
• ask us to erase information
• ask us to restrict how information is used
• object to certain processing
• request transfer of information where applicable

These rights are not absolute and may depend on the circumstances and the lawful basis on which information is being processed.

To exercise a right or ask a privacy question, contact email@hchange.co.uk.

If you have concerns about how we use your personal information, please contact us first so we can try to resolve them.

You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

We may update this Privacy Notice where our website, services or use of personal information changes. The latest version will always be published on this page with its last updated date.