This policy explains how we collect, use and protect personal data when you visit hidook.agency, contact us or work with us. We keep it in plain English. If anything is unclear, email us at [email protected].
Who we are
Hidook is the trading name of HIDOOK LTD, a private limited company registered in England and Wales with company number 15995875. Our registered office is 8a Parkside Avenue, Romford, England, RM1 4ND.
HIDOOK LTD is the controller of the personal data described in this policy. You can contact us about anything in it by email at [email protected], by phone on +44 7478 363195, or by post at our registered office.
What personal data we collect
When you contact us
If you email us, call us, message us on social media or book a discovery call, we collect the details you give us — usually your name, email address, phone number, company name and the content of your message — and our notes of the conversation.
When you become a client
We keep contact details for you and your team, contract and billing information, and the information you share with us to do the work (for example access to your website, analytics, ad accounts or customer lists you ask us to work with).
When you browse this website
- Analytics (only with your consent): if you accept analytics cookies, Google Analytics collects information about how you use the site — pages viewed, time on page, approximate location (city level), device, browser and how you arrived. See Cookies below.
- Technical logs: our hosting provider automatically processes technical data such as your IP address, browser type and the time of your request, to deliver the site securely and protect it from abuse.
How we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Replying to your enquiry and arranging a discovery call | Legitimate interests (responding to people who contact us), or steps before entering a contract |
| Delivering our services and managing our relationship with clients | Contract |
| Invoicing, accounting and record keeping | Legal obligation and contract |
| Website analytics with Google Analytics | Consent — you can withdraw it at any time |
| Keeping the website secure and working | Legitimate interests |
| Sending you marketing emails, where you have asked for them or are an existing client | Consent, or legitimate interests for similar services to existing clients — you can opt out at any time |
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
Who we share it with
We use trusted service providers who process data on our behalf, under contracts that require them to protect it:
- Vercel — website hosting.
- Cloudflare — domain name (DNS) services.
- Google — email and workspace (Google Workspace) and, only if you consent, website analytics (Google Analytics).
- Brevo — sending emails.
- Accounting, banking and professional advisers, where needed to run our business.
We may also share data where the law requires it, or to protect our rights.
International transfers
Some of our providers store or process data outside the UK, including in the United States. Where this happens, we rely on appropriate safeguards recognised under UK law, such as the UK–US Data Bridge, UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep it
- Enquiries that don't lead to work: for as long as needed to deal with them, then deleted unless we have a reason to keep them.
- Client and financial records: for the length of our relationship and then as long as the law requires — financial records are generally kept for six years.
- Analytics data: according to the retention settings of our Google Analytics account.
Cookies
Cookies are small files stored on your device. This site uses no advertising cookies. Analytics cookies are only set if you click Accept in the cookie banner. You can change your choice at any time using (also in the footer).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
hk-consent | Hidook (your browser's local storage, not a cookie) | Remembers whether you accepted or rejected analytics | Until you clear your browser data |
_ga | Google Analytics | Distinguishes visitors — only with consent | Up to 2 years |
_ga_5EX509HYH7 | Google Analytics | Keeps the state of your visit — only with consent | Up to 2 years |
If you reject analytics, Google Analytics is not loaded at all. If you accepted earlier and then reject, we delete these cookies. You can also block or delete cookies in your browser settings.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data;
- ask us to restrict or object to how we use it, including objecting to marketing at any time;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email [email protected]. We will reply within one month. We may need to confirm your identity first.
Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk, telephone 0303 123 1113.
Security
We use reputable providers, secure connections (HTTPS), access controls and two-factor authentication where available to protect personal data. No system is perfectly secure, but we take reasonable steps to keep your information safe.
Children
Our services are for businesses. This website is not aimed at children and we do not knowingly collect their data.
Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last updated. Significant changes will be highlighted on this page.