Privacy Policy

We collect information in the following ways:

• Contact Information: When you contact us via email, phone, or our contact page, we collect your name, email address, phone number, company name, and the content of your message.
• Usage Data: We collect anonymized data about how visitors use our website — pages visited, time on site, and referral sources — through Vercel Analytics. This data does not identify individual users.
• Communications: We retain email and written communications between you and Haywood Technologies for operational and legal purposes.
• Client Project Data: In the course of delivering services, we may process business data, system credentials (stored in encrypted vaults), and project-related files provided by clients.

We do not collect payment card numbers directly. All billing is processed through third-party providers who are PCI-DSS compliant.

We use the information we collect to:

• Respond to your enquiries and provide requested services
• Send project updates, invoices, and service-related communications
• Improve our website and understand how it is used
• Comply with legal obligations and enforce our agreements
• Protect the security of our systems and detect fraudulent activity

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not send unsolicited marketing emails.

We share your information only in the following limited circumstances:

• Service Providers: We use trusted third-party tools to operate our business (e.g., email hosting, project management, cloud infrastructure). These providers are contractually bound to protect your data and use it only to deliver services on our behalf.
• Legal Requirements: We may disclose information when required by law, court order, or governmental authority, or to protect the rights, property, or safety of Haywood Technologies, our clients, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, client data may be transferred as part of that transaction. We will notify affected clients before any such transfer.

Our website uses minimal, privacy-focused cookies and tracking technologies:

• Strictly Necessary Cookies: Required for the website and form features to function. These cannot be disabled.
• Privacy-Preserving Analytics: We collect anonymized, aggregated usage data (pages visited, referral sources) without collecting personally identifiable information.

You can disable cookies in your browser settings. Disabling cookies may affect some website functionality.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Enquiry data: 2 years from last contact, unless a client relationship develops
• Client project data: 7 years from project completion (for legal and financial compliance)
• Email communications: 5 years
• Analytics data: Retained in anonymized format for up to 90 days

You may request deletion of your personal data at any time. We will comply within 30 days, subject to any legal retention obligations.

We implement industry-standard security measures to protect your information:

• All data transmitted to and from our website is encrypted using TLS 1.2 or higher
• Client credentials and sensitive data are stored in encrypted vaults (never in plaintext)
• Access to client data is restricted to team members who require it for service delivery
• We conduct regular security reviews of our systems and processes

No method of transmission over the internet is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data:

• Access: The right to request a copy of the personal data we hold about you.
• Rectification: The right to request correction of inaccurate or incomplete data.
• Erasure: The right to request deletion of your personal data, subject to legal retention requirements.
• Portability: The right to receive your personal data in a structured, machine-readable format.
• Objection: The right to object to processing of your personal data for direct marketing or where we are relying on legitimate interests.
• Restriction: The right to request that we restrict processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at privacy@haywood-tech.com. We will respond within 30 days.

Our website and services may contain links to third-party websites or integrate with third-party services. This policy does not cover those third parties. We encourage you to review the privacy policies of any third-party services you use in connection with our services.

Key third-party services we use include Vercel (hosting and analytics) and Google Workspace (email and productivity). Each of these providers maintains their own GDPR-compliant privacy practices.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify active clients by email. Your continued use of our website after any changes constitutes acceptance of the updated policy.

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: