Skip to content

Legal

Privacy Policy

This policy explains what personal data HH Automations collects, why, and what rights you have over it. It applies to this website and to the enquiries, audits, and follow-up communications we run on your behalf.

Last updated

Who we are

HH Automations is operated by Hamza Hussain, trading as HH Automations (“we”, “us”, “our”), a sole trader based in the United Kingdom serving clients remotely. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller for the personal data described here.

You can reach us about anything in this policy at contact@hhautomations.com. If you are in the UK and are legally required to register with the Information Commissioner’s Office, our ICO registration number is [ICO registration number — add once registered].

The data we collect

Depending on how you interact with us, we may collect:

  • Identity and contact details — your name, business name, email address, and phone number when you submit a form, request a free audit, or book a call.
  • Your website address and business information — so we can run an SEO audit or prepare a proposal.
  • Communications — the content of messages, calls, and texts exchanged with us, including via our Speed-to-Lead follow-up system.
  • Marketing preferences — whether you have consented to receive marketing from us.
  • Technical and usage data — IP address, browser type, and pages viewed, collected in aggregate to keep the site secure and working (see our Cookie Policy).

How we collect it

  • Directly from you — when you complete a form, request an audit, email, call, or otherwise contact us.
  • Automatically — through strictly-necessary cookies and privacy-friendly, cookieless analytics when you use the site (see our Cookie Policy).
  • From your instructions — where you are a client, data you ask us to process on your behalf (for example, enquiries from your own website).

Why we use it, and our lawful basis

We only use your personal data where the law allows us to. Our lawful bases are:

  • To respond to enquiries and provide a quote or audit you asked for — on the basis of taking steps to enter into a contract, and our legitimate interest in responding to business enquiries.
  • To deliver our services and manage our relationship with clients — on the basis of performing our contract with you.
  • To send marketing about our services — on the basis of your consent, or our legitimate interest in marketing to existing business clients. You can opt out at any time.
  • To keep our site and systems secure and to comply with our legal obligations — on the basis of legitimate interests and legal obligation.

Marketing

Where you have consented, or where permitted for existing clients, we may send you occasional emails about our services. Every marketing email includes an unsubscribe link, and you can opt out at any time by emailing us. Opting out of marketing does not stop service-related messages (for example, a reply to your enquiry).

Who we share it with

We do not sell your personal data. We share it only with the service providers (“processors”) that run our systems, each bound to process it only on our instructions:

  • Supabase — database and application hosting.
  • Vercel — website hosting and privacy-friendly analytics.
  • Twilio — SMS, voice, and messaging for our Speed-to-Lead follow-up.
  • Resend — transactional and sequenced email delivery.
  • Google — where you use tools we integrate (for example, Search Console and Business Profile) with the relevant account’s authorisation.
  • Professional advisers and authorities — where required by law.

International transfers

Some of our providers are based outside the UK. Where personal data is transferred abroad, we rely on safeguards recognised under UK data protection law — such as UK adequacy regulations or the International Data Transfer Agreement / Addendum — so that your data remains protected.

How long we keep it

We keep personal data only as long as we need it for the purposes above. Enquiry data we do not convert into a client relationship is kept for up to [24] months; client records are kept for the duration of our engagement and for [6] years afterwards to meet legal and accounting obligations, then securely deleted.

Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct data that is inaccurate or incomplete.
  • Erasure — ask us to delete your data in certain circumstances.
  • Restriction — ask us to limit how we use your data.
  • Portability — receive your data in a portable format.
  • Object — object to processing based on legitimate interests or direct marketing.
  • Withdraw consent — at any time, where we rely on consent.

Security

We take appropriate technical and organisational measures to protect your personal data, including access controls and encryption in transit. No system is perfectly secure, but we work to keep your data safe and will notify you and the ICO of a breach where we are legally required to.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised, and material changes will be reflected here.

How to contact us or complain

To exercise any right, or if you have a question about this policy, email us at contact@hhautomations.com. We aim to respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to address your concern first.