Privacy & data protection
Clear information. Responsible data use.
This notice explains how H-Team Ltd collects, uses, shares and protects personal information when you visit htmedia.uk, contact us or work with H-Team Media and our integrated business divisions.
We use information only for clear business, service, security and legal purposes.
We seek only the information reasonably needed for the relevant interaction.
We apply technical and organisational safeguards appropriate to the risk.
You can ask about your information and exercise your data protection rights.
Who we are
H-Team Ltd (company number 12128465), trading through H-Team Media and its integrated Media, Legal & Compliance and Business Consulting activities, is the controller for the personal information described in this notice.
Our registered office is 3 Boles Road, Bishops Lydeard, Taunton, TA4 3FG, United Kingdom.
This notice covers htmedia.uk, business enquiries, proposals and our relationship with prospects, clients, partners and suppliers. A contract, project brief or separate notice may provide additional information for a specific engagement.
Information we collect
Depending on how you interact with us, we may collect:
- Identity and business contact data, such as your name, role, organisation, email address and telephone number.
- Enquiry and project data, including messages, requirements, objectives, documents and other information you choose to provide.
- Relationship and commercial data, such as correspondence, proposals, contracts, supplier information, invoices and payment status.
- Technical and usage data, including IP address, browser and device details, referring page, pages requested, timestamps, security logs and advertising or consent identifiers where relevant.
- Communication preferences, including whether you wish to receive or stop receiving marketing communications.
We do not ask you to provide special-category or highly sensitive personal information through the website. Please do not include it in a general enquiry unless it is genuinely necessary and we have agreed an appropriate way to receive it.
How and why we use personal information
UK data protection law requires us to have a lawful basis for each use of personal information. The basis depends on the purpose and the context.
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Respond to enquiries, understand requirements and prepare proposals. | Contact, organisation, message and project information. | Steps at your request before a contract; our legitimate interests in developing and managing business relationships. |
| Deliver and manage services, projects, contracts, suppliers, billing and support. | Contact, project, relationship and commercial information. | Performance of a contract; legal obligations; our legitimate interests in operating and improving our services. |
| Operate, troubleshoot and protect our website, systems, people and business. | Technical, usage, security and correspondence information. | Our legitimate interests in reliable and secure operations; legal obligations where applicable. |
| Use non-essential advertising, measurement or similar technologies. | Device, usage, cookie and advertising identifiers. | Your consent where required by PECR and UK GDPR. |
| Send relevant business communications and measure engagement. | Contact details and communication preferences. | Consent where required; otherwise our legitimate interests where direct marketing law permits. |
| Meet legal, regulatory, accounting and dispute-resolution requirements. | Any relevant records. | Legal obligations; our legitimate interests in establishing, exercising or defending legal claims. |
Where we rely on legitimate interests, we consider the purpose, necessity and impact on you. You may object to processing based on legitimate interests; see “Your rights” below.
How we obtain information
- Directly from you when you use a linked form, contact us, meet us or work with us.
- From your organisation, colleagues or authorised representatives.
- From public and professional sources where relevant to a legitimate business purpose.
- Automatically from our website, hosting, security and advertising technologies.
- From service providers that support an interaction you initiate.
If you provide personal information about another person, you must have authority to do so and give them access to this notice where appropriate.
Cookies, fonts and advertising
Cookies and similar technologies can store or access information on your device. Some are necessary for core website administration, security and functionality. Non-essential technologies may support advertising, measurement or preferences.
Services currently relevant to this website
- Google Fonts is used to deliver typefaces. When your browser requests font resources, Google may receive technical information such as your IP address and browser details.
- Google AdSense may be used for advertising and related measurement. Google may use cookies, device or advertising identifiers and interaction data in accordance with its own settings and privacy information.
- Google reCAPTCHA is used on linked 123FormBuilder forms to help prevent spam and abuse. Google may process device, network and interaction information for that purpose.
We rely on consent for non-essential cookies and similar technologies where UK law requires it. If such consent is not available, those technologies should remain disabled. You can also restrict cookies through your browser and manage Google advertising preferences through My Ad Center.
For more detail about Google’s processing, see the Google Privacy Policy and its advertising technologies information.
Who we share information with
We share personal information only when reasonably necessary and subject to appropriate safeguards. Recipients may include:
- Website, hosting, IT, security and communications providers that help us operate and protect our services.
- 123FormBuilder, when you choose to submit a linked enquiry form. The form opens on the provider’s domain and may use Google reCAPTCHA.
- Google, where Google Fonts, AdSense or reCAPTCHA are used as described above.
- Specialist consultants, subcontractors and project partners where their involvement is needed to deliver an integrated service, subject to role-appropriate confidentiality and data-protection requirements.
- Professional advisers, including legal, accounting, audit and insurance providers.
- Courts, regulators, law-enforcement bodies or public authorities where disclosure is required or permitted by law.
- A purchaser, investor or successor organisation in connection with a genuine corporate transaction, with appropriate confidentiality and due diligence controls.
We do not sell personal information.
International transfers
Some suppliers may process information outside the United Kingdom. Where UK transfer rules apply, we use an available legal mechanism—such as UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses—together with supplementary safeguards where appropriate.
You may contact us for more information about the safeguards relevant to your data.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to maintain a business relationship and meet legal, tax, accounting, security and dispute-resolution obligations.
We set or review retention by considering the nature and sensitivity of the information, the relationship or contract, the risk of harm, applicable limitation periods, legal requirements and whether the purpose can be achieved another way. When information is no longer required, we delete or anonymise it, or securely isolate it until deletion is possible.
How we protect information
We use proportionate technical and organisational measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, disclosure or access. These include access controls, authentication, encryption in transit where supported, supplier controls, backups, maintenance and incident-management procedures.
No internet service is completely secure. If you believe information involving H-Team has been compromised, contact us promptly using the details below.
Your data protection rights
Depending on the circumstances, UK law may give you the right to:
- be informed about how your personal information is used;
- request access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to erase information in certain circumstances;
- ask us to restrict processing in certain circumstances;
- object to processing based on legitimate interests and object at any time to direct marketing;
- receive certain information in a portable format;
- withdraw consent at any time where processing relies on consent; and
- raise a concern with the Information Commissioner’s Office.
These rights are not absolute. We may need to verify your identity and may request information needed to locate the relevant records. We will explain if an exemption or restriction applies.
Direct marketing
We may send relevant business communications where you have consented or where the law otherwise permits. Every direct marketing message will provide a practical way to opt out. You may object to direct marketing at any time.
We may keep a minimal suppression record after an opt-out so that we can respect your choice.
Automated decisions and Media Footprint
We do not use personal information collected through this website to make solely automated decisions that produce legal or similarly significant effects for individuals.
Media Footprint and our integrated consultancy services support business analysis and decision-making. Outputs are interpreted in context and supported by human judgement. A specific project may include additional data arrangements, which will be addressed in the relevant project or contractual documentation.
Children
Our website and services are intended for businesses and professional users and are not directed at children. We do not knowingly collect children’s personal information through this website. If you believe a child has provided information to us, please contact us.
Third-party websites and forms
Our website links to third-party services, including 123FormBuilder and professional or social platforms. When you follow a link, the third party operates its own website and may collect information under its own privacy terms. We encourage you to review those terms before submitting information.
Changes to this notice
We may update this notice when our services, suppliers or legal obligations change. We will publish the revised version on this page and update the effective date. Where a change materially affects how we use existing information, we will take additional steps where required by law.
Questions, rights requests and complaints
To ask a privacy question or exercise a right, contact H-Team Ltd using one of the routes below. Please begin an online message with “Data protection request” so it can be routed appropriately.
Contact H-Team
Use our secure enquiry route and identify the request as data protection-related.
Write to us
H-Team Ltd3 Boles Road
Bishops Lydeard
Taunton TA4 3FG
United Kingdom
Information Commissioner’s Office
If you remain dissatisfied, you can make a complaint to the UK Information Commissioner’s Office. We would appreciate the opportunity to address your concern first, but you are not required to contact us before approaching the ICO.
This notice applies to personal information controlled by H-Team Ltd. It does not replace project-specific contractual or regulatory information where that is required.