What we do with your data.

Heimvar Group Ltd, a company registered in England and Wales, company number 17124411, registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. We are the data controller for this website and are registered with the Information Commissioner's Office under number 00014734417.

Only this website. If you are a customer of one of our platforms, the notice for that platform governs your data there — for Aegis AI that is aegis-ai.co.uk/privacy.html.

Two things, and nothing else.

What you send us. If you use the contact form: your name, email address, the organisation you give, the subject you pick and the message you write.

Server logs. Our web server records the usual request line for every page served: IP address, browser user-agent, the page requested and the time. These rotate daily and are kept for 14 days, then deleted.

This site sets no cookies. There is no analytics, no advertising pixel, no session recording and no third-party tracker of any kind. Nothing follows you between visits, so there is no consent banner to click.

Our pages load typefaces from Google Fonts. That request discloses your IP address and browser to Google, in the same way any embedded resource would. It is not used by us for tracking, but if that matters to you, a font-blocking extension stops it and the site still works.

To answer you, and to keep the site running and secure. In data-protection terms our lawful basis is legitimate interests: you asked us a question and we would like to answer it, and a server has to log requests to stay operable. We do not use anything from this site for marketing lists or profiling.

Hetzner hosts this website in Helsinki, Finland. Resend delivers the email your contact-form message becomes. Both act on our instructions under contract. We do not sell personal data and we do not share it with anyone else unless the law requires it.

Data stays in the European Economic Area for hosting. Some suppliers are United States companies; where personal data reaches them it is covered by the UK International Data Transfer Addendum or an adequacy decision.

Enquiries: for as long as the conversation is live, and then up to two years in case you come back to us, unless you ask us to delete it sooner. Server logs: 14 days.

Under UK data-protection law you can ask for a copy of your data, ask us to correct or delete it, ask us to restrict what we do with it, object to our use of it, and ask for it in a portable form. Write to us and we will answer within one month. There is no charge.

Tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office — ico.org.uk/make-a-complaint, helpline 0303 123 1113. You do not have to come to us first.

Data-protection questions and rights requests: [email protected]. Anything else: the contact form.

If this notice changes we update the date at the top. We do not make changes retroactive.