Privacy Policy

1. Who we are

Hensley Digital Ltd is the controller of personal information collected through its website and direct business enquiries, except where another controller is identified. Registered office: Gemini House, 136–140 Old Shoreham Road, Brighton, East Sussex, BN3 7BD, United Kingdom. Privacy contact: privacy@hensleydigital.com.

2. Information collected

We may collect name, job title, company, business email, website information, campaign details, publisher details, messages, communications, form metadata, security logs, consent or privacy-preference records and information supplied during a commercial relationship. Please do not submit passwords, payment-card information, identity documents or special-category personal information through our general website forms.

3. Sources

Information may come from details supplied directly, website forms, emails, business correspondence, authorised representatives, technical website activity and public professional information where legitimately relevant to an enquiry.

4. Purposes

We use information to respond to enquiries, review advertiser requests, review publisher applications, take steps before a contract, manage business relationships, coordinate approved campaigns, maintain website security, prevent abuse, meet legal obligations, handle rights requests, handle data-protection complaints and establish, exercise or defend legal claims.

5. Lawful bases

Relevant lawful bases may include steps before entering a contract, performance of a contract, legitimate interests, legal obligations and consent where specifically requested. The privacy acknowledgement on forms is not consent to general processing.

6. Marketing

Submitting a website form does not automatically subscribe the sender to marketing communications. Any future marketing must have a suitable lawful basis and a clear opt-out method.

7. Sharing

We may share information with hosting providers, email and communications providers, security and technical-support providers, professional advisers, relevant advertiser or publisher contacts where needed for an approved engagement, authorities where legally required and parties involved in a legitimate corporate transaction. Hensley Digital does not sell personal information.

8. International transfers

Some providers or business partners may process information outside the United Kingdom. Appropriate safeguards will be assessed and used where required.

9. Retention

• Unsuccessful general or advertiser enquiries: normally up to 24 months after the last meaningful communication.
• Unsuccessful publisher applications: normally up to 18 months after the last meaningful communication.
• Active client, publisher and contractual records: for the relationship and afterwards for the period reasonably required for legal, accounting and dispute purposes.
• Form-security and rate-limiting data: only for the short period required for security.
• Privacy-rights and data-protection-complaint records: for the period reasonably required to demonstrate appropriate handling.

Information may be deleted earlier where it is no longer required.

10. Security

We use proportionate technical and organisational measures intended to protect information. No website or email system can be guaranteed as absolutely secure.

10A. Hensley Assistant

The Hensley Assistant uses local website content and deterministic responses for common questions. It does not use an external artificial-intelligence service by default, does not store a permanent conversation history and does not send free-text assistant questions to analytics.

11. Individual rights

Depending on the circumstances, rights may include access, correction, erasure, restriction, objection, portability, withdrawal of consent where consent applies and complaint rights. Identity verification may be required before a request is completed.

12. Data-protection complaints

Data-protection complaints may be sent to privacy@hensleydigital.com. We will acknowledge a qualifying complaint within 30 days and take appropriate steps to investigate it without undue delay. We will keep the complainant informed and explain the outcome. You may also complain to the UK Information Commissioner at ico.org.uk.

13. Children

The corporate website and services are not directed at children and business forms are not intended for children.

14. Automated decisions

Website forms are not subject to solely automated decisions producing legal or similarly significant effects.

15. Third-party links

External sites have their own policies and are not controlled by Hensley Digital.

16. Changes

This policy will be reviewed when website functionality, suppliers or operational processes change. Version dates are shown above.

17. Contact

Contact privacy@hensleydigital.com or write to the registered office.