Privacy Policy
Last updated: June 2026
HAP Consulting Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, store and protect your personal data when you use our websites and services.
This policy applies to:
- Our consulting website at hapconsulting.co.uk
- Our online shop at shop.hapconsulting.co.uk
- Any services, forms, newsletters or booking tools accessed through either site
We are registered in the United Kingdom. Our registered address is Unit 14, Basepoint Business Centre, Basingstoke, RG24 8UP.
For any questions about this policy or your personal data, contact us at info@hapconsulting.co.uk or call +44 1256 639285.
Information we collect
Information you provide directly
When you interact with our websites or services, you may provide:
- Your name, email address, phone number and company name (when submitting a contact form, booking a strategy call, or subscribing to our newsletter)
- Details about your business challenge or enquiry (through our contact and enquiry forms)
- Your budget range and preferred contact method
- Delivery address, billing address and company details (when placing an order through our shop)
- Payment information (processed securely through our payment provider, we do not store your full card details on our servers)
- Account registration details (if you create an account on our shop)
- Product reviews or feedback you choose to submit
- Any other information you voluntarily provide in correspondence with us
Information collected automatically
When you visit our websites, we automatically collect:
- Your IP address, browser type, device type and operating system
- Pages you visit, time spent on each page, referring website and navigation path
- Your approximate geographic location (derived from IP address)
- Cookie and similar technology data (see our Cookie Policy for full details)
- Shopping behaviour on our shop (products viewed, items added to basket, purchases made) are used to improve our products and user experience
Why we collect your data and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry or contact form submission | Legitimate interest |
| Providing consulting services you have engaged us for | Contract performance |
| Processing and fulfilling orders placed through our shop | Contract performance |
| Sending order confirmations, dispatch notifications and delivery updates | Contract performance |
| Sending you our newsletter (Perspectives by HAP) | Consent |
| Booking and managing strategy calls and discovery calls | Legitimate interest |
| Managing your shop account (if you create one) | Contract performance |
| Processing payments and preventing fraud | Contract performance and legitimate interest |
| Improving our websites and understanding how visitors use them | Legitimate interest |
| Responding to product reviews and feedback | Legitimate interest |
| Complying with legal, tax and regulatory obligations | Legal obligation |
How we use your data
We use your personal data to:
- Respond to your enquiries and provide the services you request
- Process, fulfil and deliver orders placed through our shop, including managing returns and refunds
- Send transactional communications (order confirmations, dispatch notifications, delivery updates)
- Send you our newsletter if you have subscribed (you can unsubscribe at any time via the link in every email)
- Improve our websites, products, content and services
- Detect and prevent fraud or misuse of our services
- Comply with legal, tax and regulatory requirements (including HMRC record-keeping obligations)
We do not sell, rent or share your personal data with third parties for their marketing purposes. We will never send you marketing communications without your explicit consent.
Who we share your data with
We may share your data with trusted third parties who help us operate our websites and deliver our services:
Service providers:
- Website hosting provider
- Email marketing platform (for newsletter delivery)
- Analytics services (Google Analytics, Microsoft Clarity)
- Payment gateway provider (for processing shop transactions securely)
- Delivery and courier services (for fulfilling physical product orders)
- Booking system provider (Microsoft Bookings, for strategy call scheduling)
- Form processing tools
These providers process data on our behalf under data processing agreements and are contractually required to protect your data and use it only for the purposes we specify.
Other disclosures:
- Professional advisers (accountants, legal advisers) where necessary for our business operations
- Law enforcement, regulatory bodies or courts where required by law or to protect our legal rights
- In connection with a merger, acquisition or sale of business assets (you would be notified)
How long we keep your data
We retain your personal data only for as long as necessary for the purpose it was collected:
| Data type | Retention period |
|---|---|
| Contact form and enquiry data | 2 years from last interaction, unless a business relationship is established |
| Newsletter subscriber data | Until you unsubscribe, plus 30 days for processing |
| Strategy call and discovery call records | 2 years from the date of the call |
| Shop order and transaction records | 7 years (HMRC requirement for financial records) |
| Shop account data | Until you request account deletion, or 3 years of inactivity |
| Payment card details | Not stored. Processed securely by our payment provider |
| Analytics data | Retained in anonymised, aggregated form indefinitely |
| Consulting engagement records | 7 years from completion of the engagement |
Where your data is stored
Your data is primarily stored within the United Kingdom and the European Economic Area (EEA). Where our service providers process data outside the UK/EEA (for example, where a cloud service has servers in other jurisdictions), we ensure appropriate safeguards are in place, such as:
- UK International Data Transfer Agreements (IDTAs)
- Standard Contractual Clauses (SCCs)
- Adequacy decisions recognised by the UK government
Your rights
Under UK data protection law (UK GDPR), you have the right to:
- Access – request a copy of the personal data we hold about you
- Rectification – ask us to correct any inaccurate or incomplete data
- Erasure – ask us to delete your personal data (in certain circumstances)
- Restriction – ask us to restrict how we process your data
- Objection – object to our processing of your data (where based on legitimate interest)
- Data portability – receive your data in a structured, commonly used, machine-readable format
- Withdraw consent – where processing is based on consent (such as newsletter subscriptions), you can withdraw at any time without affecting the lawfulness of prior processing
- Complain – lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled
To exercise any of these rights, contact us at info@hapconsulting.co.uk. We will respond within 30 days. We may ask you to verify your identity before processing your request.
Children’s privacy
Our websites and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Automated decision-making
We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects on you.
Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include encrypted connections (SSL/TLS), secure hosting, access controls, and regular security reviews.
No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee its absolute security.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices, services or legal requirements. The “last updated” date at the top of this page reflects the most recent version. Material changes will be communicated via our website. We encourage you to review this policy periodically.
Contact us
HAP Consulting Ltd Unit 14, Basepoint Business Centre, Basingstoke, RG24 8UP Email: info@hapconsulting.co.uk Phone: +44 1256 639285