1. Important Information and Who We Are
1.1 Purpose of this Privacy Policy
This privacy policy aims to give you information on how Hengram Ltd collects and processes your personal data through your use of this website, including any data you may provide through an Elementor form when you enquire about our services or need customer support.
This website is not intended for children, and we do not knowingly collect data relating to children.
1.2 Our Details (The Data Controller)
Hengram Ltd is the data controller and is responsible for your personal data (referred to as “we”, “us” or “our” in this privacy policy).
| Detail | Information |
| Full Legal Entity Name | Hengram Ltd |
| Registered Address | 82 High Street, Golborne, Warrington, United Kingdom, WA3 3DA |
| Contact Email | info@hengram.co.uk |
| Website URL | https://hengram.co.uk |
1.3 Contact Details
If you have any questions about this privacy policy or our privacy practices, please contact us using the details above.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
2. The Data We Collect About You
Personal data, or personal information, means any information about an individual from which that person can be identified.
We may collect, use, store and transfer the following categories of personal data:
- Identity Data: Name, Business Name.
- Contact Data: Email address, Telephone number.
- Technical Data: Internet Protocol (IP) address. (Collected automatically for website security and analysis).
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, or genetic/biometric data).
3. How Your Personal Data is Collected
We use different methods to collect data from and about you:
- Direct Interactions (Elementor Forms): You provide us with most of the data we collect when you fill in a form on our website to enquire about our services or submit a customer support request. This includes your Identity and Contact Data.
- Automated Technologies (Google Analytics & Cookies): As you interact with our website, we automatically collect Technical Data about your browsing actions and patterns. This is done through cookies and similar technologies, including Google Analytics.
- Cookie Control: Our cookies are managed and controlled via the CookieYes cookie consent solution. You will be prompted on your first visit to accept or reject non-essential cookies. You can always change your preferences via the link in the website footer.
4. How We Use Your Personal Data and the Lawful Basis
We will only use your personal data when the law allows us to. Under UK GDPR, we must have a lawful basis for each purpose. The table below outlines our purposes and corresponding lawful bases:
| Purpose for Processing | Categories of Data Involved | Lawful Basis for Processing |
| To respond to your service/lead enquiry and send relevant information about our services. | Identity Data, Contact Data, Technical Data. | Legitimate Interests: To grow our business by responding to and converting prospective leads who show an interest in our services. |
| To provide customer support/resolve a query submitted via a form. | Identity Data, Contact Data, Technical Data. | Contractual Necessity (pre-contractual steps) or Legitimate Interests (providing good customer service). |
| To manage our website, analyse usage, and improve our services (via Google Analytics). | Technical Data. | Consent: This is obtained via the CookieYes cookie banner prior to the setting of non-essential analytical cookies. |
| To add you to our email marketing list (future activity). | Identity Data, Contact Data. | Consent: We will ensure clear, opt-in consent is obtained for any future email marketing activities. |
5. Disclosures of Your Personal Data
We may share your personal data with the following parties for the purposes set out in Section 4:
| Third Party | Purpose of Sharing |
| Google Analytics | To collect and process anonymous website traffic data to help us understand user behaviour and improve the website. |
| Future Email Marketing Provider | To manage and send marketing communications, only if you have provided explicit consent. |
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We only permit our third-party service providers to process your personal data for specified purposes and in accorda1nce with our instructions. We do not sell your personal data to any third parties.
6. Data Security and Retention
6.1 Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
6.2 Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Form Submission Data (Identity, Contact, Technical Data): Data collected directly from forms is stored on the website for a maximum of 12 months and is then securely deleted. We retain it for this period to follow up on leads and review service query history.
- Google Analytics Data: This data is retained for a period determined by our Analytics settings.
7. Your Legal Rights (UK GDPR)
Under certain circumstances, you have rights under UK GDPR in relation to your personal data. These include:
- The right to be informed about how we use your personal data (this Privacy Policy).
- The right of access (to request a copy of the data we hold about you).
- The right to rectification (to have incomplete or inaccurate data corrected).
- The right to erasure (to ask us to delete or remove personal data where there is no good reason for us to continue processing it).
- The right to restrict processing (to ask us to suspend the processing of your personal data).
- The right to data portability (to request the transfer of your personal data to you or a third party).
- The right to object to processing (where we are relying on a legitimate interest).
- Rights in relation to automated decision making and profiling.
If you wish to exercise any of the rights set out above, please contact us at info@hengram.co.uk. We will aim to respond to all legitimate requests within one month.