Privacy Policy

Who we are

The hce.studio website is operated by All Too Human Ltd (“HCE Studio”, “we”, “us” or “our”), a company registered in England & Wales (company number 15336127) with its registered office at 15 Hawkins Grove, Church Crookham, Fleet, GU51 5TX.

For the purposes of UK data protection law — the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018 — we are the “data controller” for the personal data described in this policy.

The personal data we collect

Messages you send us

When you contact us through the contact form, we collect your name, email address, subject and message so we can read and respond to your enquiry.

Technical and usage data

Like most websites, our servers automatically record technical information such as a timestamp, the pages requested, a signed visitor identifier (see Cookies), and diagnostic logs. We use this for security, to keep the Site running, and to understand usage in aggregate.

How we use your data and our lawful bases

Under UK GDPR we must have a lawful basis for processing your personal data:

• Consent — setting non-essential cookies. You can withdraw consent at any time.
• Legitimate interests — responding to enquiries you send us, securing the Site, preventing abuse, maintaining essential cookies, and improving the Site, where these interests are not overridden by your rights.
• Legal obligation — complying with the law, including responding to lawful requests and meeting our accountability duties.

Who we share your data with

We do not sell your personal data. We share it only with the categories of recipient needed to run the Site:

• Cloud hosting and infrastructure providers who store and serve the website.
• Email delivery providers who deliver the messages you send us through the contact form.
• Analytics or product-measurement providers, where you have consented to non-essential analytics.
• Professional advisers, authorities and acquirers — where required by law, to enforce our terms, or in connection with a business sale or reorganisation.

We require our service providers to process personal data only on our instructions and to keep it secure. A current list of the specific providers we use is available on request from privacy@hce.studio.

International transfers

Some of our service providers may process personal data outside the UK. Where they do, we rely on appropriate safeguards recognised under UK data protection law — such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses — so that your data remains protected.

Cookies and similar technologies

We use two categories of cookie and similar technology:

• Essential (always active) — needed for the Site to work, including security and remembering your theme preference. This includes a signed visitor identifier cookie used for security and aggregated, non-identifying analytics in our server logs; it contains no personal data and lasts around 180 days.
• Optional (consent required) — analytics and other non-essential cookies, set only if you agree.

You can review and change your choices at any time using the Cookie Preferences link in the site footer.

How long we keep your data

We keep personal data only for as long as we need it. Messages you send us are retained until your enquiry has been dealt with and for a reasonable period afterwards, unless we need to keep them longer to meet a legal obligation. Diagnostic logs are kept for a limited period and then purged.

Your rights

Under UK GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing in certain circumstances;
• receive certain data in a portable format; and
• withdraw consent where we rely on it.

To exercise any of these rights, contact us at privacy@hce.studio. We will respond within the time limits required by law.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would, however, appreciate the chance to address your concerns first.

Children

This Site is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us so we can remove it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where the changes are significant, take reasonable steps to let you know.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us at privacy@hce.studio, or write to us at All Too Human Ltd, 15 Hawkins Grove, Church Crookham, Fleet, GU51 5TX.