Privacy Policy

1. The data we collect

We only collect the personal data we need to respond to you and provide our services:

• Contact enquiries — when you use our contact form, we collect the name, email address, optional company name and the message you send us.
• Messaging channels — if you reach us on WhatsApp, LINE or WeChat, we receive the profile information and messages you choose to share on that platform.
• Technical data — our hosting provider keeps standard server logs (such as IP address and browser type) for security and to operate the site. We do not run analytics or advertising trackers, and we do not build profiles of visitors.

2. How and why we use it

We use your personal data to respond to your enquiry, to discuss, scope and deliver work you ask us to do, and to comply with our legal obligations. Our lawful bases are:

• Legitimate interests — to respond to your enquiry and run our business, in a way that does not override your rights.
• Steps prior to a contract, and performance of a contract — where you ask us to provide services.
• Legal obligation — where the law requires us to keep certain records.

3. Who we share it with

We do not sell your personal data. We share it only with service providers who help us operate, and only as needed:

• Web3Forms — processes contact-form submissions and delivers them to us by email.
• Our email and hosting providers — to receive your message and serve this website.
• Messaging platforms — WhatsApp (Meta), LINE and WeChat (Tencent) if you choose to contact us there, under their own privacy policies.

We may also disclose data where required by law, or to establish, exercise or defend legal claims.

4. International transfers

Some of our providers are located outside the UK. Where personal data is transferred abroad, we rely on an adequacy decision or on appropriate safeguards (such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses).

5. How long we keep it

We keep enquiry and contact data only for as long as needed to deal with your request and for our legitimate business and legal record-keeping purposes, after which we delete or anonymise it.

6. Your rights

Under UK data protection law you have the right to access your personal data, and to ask us to correct, delete or restrict it, to object to certain processing, to request portability, and to withdraw consent where we rely on it. To exercise any of these rights, email us at privacy@harwell.ai.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to address your concern first.

7. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, but we work to protect your information and keep our practices under review.

8. Children

This website and our services are intended for businesses and professionals, and are not directed at children.

9. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised; material changes will be reflected here.

10. Contact us

For any privacy question or request, contact Harwell Ltd at privacy@harwell.ai.