Privacy Policy | Hammerhead Tech

Last updated: 11 July 2026

Hammerhead Technologies Ltd respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit hammerheadtech.co.uk, contact our software development team, request a quote, subscribe to our communications or use our services.

This policy applies to website visitors, prospective clients, current clients, suppliers, business partners and anyone who communicates with Hammerhead Technologies.

Who We Are

Hammerhead Technologies Ltd or “Hammerhead Technologies”, “Hammerhead Tech”, “we”, “us” or “our”, is a software development and digital services provider registered in the UK.

Legal entity: Hammerhead Technologies Ltd
Entity number: 13865913
Registered address: Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, England, BL6 6HG
Email: support@hammerheadtech.co.uk
Website: https://hammerheadtech.co.uk/

Hammerhead Technologies Ltd acts as a data controller of the personal data subject to this Privacy Policy. It means that we are responsible for establishing the purpose and the way of processing such data.

While we process personal data of clients in order to deliver our software development, hosting, support and other technical services on their behalf, we may act as a data processor. In this case, the client acts as a data controller, and their privacy notice and our data processing terms and conditions shall apply.

Scope of This Privacy Policy

Our Privacy Policy will be relevant if you:

access or use our website;
fill out any contact, consulting or quotation form;
contact us via email, phone call, WhatsApp, or other medium;
subscribe to our mailing list or marketing communications;
discuss, buy or utilise our software and digital solutions;
cooperate with us as our client, supplier, contractor or business partner; or
Engage with our content, events or social media accounts.

The Privacy Policy will not apply to any websites, platforms or services run by third parties separately from us.

Personal Information We Collect

The type of personal data that we collect varies according to how you engage with us.

Identity and contact information

This could be your:

name;
job title;
organisation or company name;
email address;
phone number;
physical business address; and
preferred means of communication.

Project and enquiry information

If you make an enquiry for a consultation or quotation, we could also gather:

the service(s) you require;
project specifications and goals;
timescale requirements;
budget estimates;
existing system and integration details; and
other information provided with your enquiry.

Client, supplier and transactional information

If you become a client of ours, we could collect:

contract and proposal details;
project communications;
information concerning billing and invoicing;
payment details and transactions;
delivery of our services; and
support enquiries.

We generally do not obtain credit card information from this website. In the event of using any third party service for processing payments, they will handle your payment information independently of this privacy notice.

Communication information

Information related to emails, telephone calls, meetings, support enquiries, contact form enquiries and other correspondence.

Marketing and Preference Information

This could comprise:

whether you have signed up for our newsletter;
your preference regarding communications;
your preference regarding cookies;
emails sent to you and your interactions with marketing emails; and
consent, objection and unsubscribe data.

Technical and Website-usage Information

In using our website, we or our authorised service providers might collect:

internet protocol address;
browser and browser version;
device type;
operating system;
screen resolution;
location based on technical data.
the referring website or source of search;
web pages accessed and actions taken;
the date and time of access and how long you stay; and
cookie or similar identifier data.

Sensitive Personal Information

We typically will not need any special categories of personal data or information about criminal convictions via our website.

Please refrain from providing us with sensitive personal data in general enquiries unless absolutely necessary.

How We Collect Personal Information

Personal data is obtained from the following sources.

Information obtained directly from you

Information is obtained where you fill out a form, request a quote, sign up for newsletters, contact us, make a contract or communicate with our employees.

Information obtained automatically

Technical and usage data may be obtained via server logs, cookies, analytics and security services upon visiting and interacting with our website.

Information obtained from third parties

We may obtain contact information of businesses from the following:

your company/organisation;
our clients, vendors and referrers;
professional advisors;
third-party analytics and technology providers;
businesses listed publicly; and
social media and professional networking websites.

How and Why We Use Personal Information

UK data protection law mandates that we must have a lawful basis for processing any personal data. This will be determined by the purpose for which the data is being processed.

Responding to enquiries and making quotations

Your contact information and the information relating to your projects are processed for:

responding to your inquiry;
determining your needs;
organising consultations;
making an estimate/offer; and
taking actions at your request prior to entering into any contract.

Lawful basis: Taking actions prior to entering into a contract and our legitimate interest in responding to enquiries for our business and establishing business relationships.

Delivery of software and digital services

The relevant information is processed for:

delivery of contracted services;
managing software development projects;
technical support and maintenance;
communication regarding the delivery of the project;
management of the accounts, billing and payments; and
client and vendor records management.

Lawful basis: Performance of the contract, taking actions prior to entering into a contract and our legitimate interests in operating the business.

Operating and protecting our website and systems

Technical information is used for:

running and administering the website;
finding and troubleshooting technical problems;
preventing spam, fraudulent and malicious activity;
preventing unauthorised access;
backing up data and ensuring business continuity; and
enhancing website performance and accessibility.

Lawful Basis: Legitimate interest in running a secure, functional website and in complying with legal requirements.

Performance and improvement of website

Analytics information is used to find out how visitors access and use our website, which parts are most visited and to enhance user experience on the website.

Lawful Basis: Consent when we use cookies or other similar technologies for analytics.

Sending marketing communications

When appropriate, we may use contact details to send you relevant information on our services, analysis, company news and events.

Lawful Basis: Consent or our legitimate interest in promoting our business services, subject to electronic marketing laws allowing us to do so.

You can unsubscribe or object to marketing communications at any time.

Complying with legal and regulatory obligations

Information may be processed in order to:

keep accounting and tax records;
comply with lawful requests from government bodies;
protect or pursue legal rights;
enforce contracts; and
comply with other obligations of a security, regulatory and compliance nature.

Lawful basis: Compliance with legal obligations and our legitimate interests in protecting our legal and business position.

If you do not provide requested information

The required information that is indicated on our forms is essential for us to answer you. The optional information does not need to be provided.

The information necessary for the execution of a contract or rendering of services cannot be provided if it is not provided.

Google Analytics

Google Analytics is used by us to analyse how people use our website and to enhance its content, performance and usability.

Depending on its configuration, Google Analytics collects information, including:

number of users and sessions;
information on the pages viewed and the interactions with our website;
length of session;
geographical approximation of the user;
browser and device information;
referrer and source of traffic; and
technical and diagnostic data.

Google Analytics utilises cookies and related technologies to identify website usage and provide statistical reports.

Cookies for analytics purposes are not to be set until you consent to their use via our cookie settings. You can withdraw your consent at any point in time by accessing Cookie Settings again.

Google processes information with the use of servers and service providers in different jurisdictions. For more information on how Google processes information, please see:

You may also choose to install the Google Analytics opt-out add-on. The add-on does not substitute our cookie settings on this website.

WordPress and Website Forms

Our website uses WordPress.

Information such as IP addresses, browser information, security logs, error logs, and cookie preferences may be processed by our website hosting platform or by the themes/plugins that are used on the website.

Contact and quote-request forms

The information you provide through filling out a form will be:

E-mailed to authorised members of our team;
Stored securely on our website or form-management system;
Entered in our business communication or customer management system; and
Subject to verification through spam and security filters.

We use your provided information only for the purpose for which it was intended and as specified in this Privacy Policy.

Blog comments

If there is a comment feature available in a blog post and you decide to comment, we may collect the information provided in the comment along with your IP address and browser information.

Cookies and Similar Technologies

Cookies are small files that get installed on your device upon visiting a website. Other technologies include pixels, tags, scripts and local browser storage.

The types of technologies we might use include:

Necessary technologies

These technologies are necessary to operate, secure or administer the website as well as providing services you have requested. They may also store your privacy and cookie settings.

Analytics technologies

They enable us to monitor website traffic and visitor behaviour as well as identify improvements needed. The example of analytics technologies is Google Analytics.

Preferences technologies

These technologies may store users’ preferences like display, language or accessibility settings.

Marketing technologies

Only marketing or advertising technologies that are clearly disclosed and where there is an appropriate consent provided will be used. Marketing technologies may be used to measure campaigns and deliver more relevant advertising.

You can choose to accept, reject or adjust non-necessary technologies via the cookie banner or cookie settings. Necessary technologies usually cannot be turned off via website because the website will not work properly without them.

Also, you may control cookies using browser settings. It may negatively affect website functionality if you block all cookies.

Marketing Communications

Newsletters, updates on our services, business insights or promotional material may be sent in circumstances where:

It has been requested or agreed to by you;
You are an existing customer, and the message relates to our relevant services, as allowed under the law. Or
The message is sent for another reason, which is legal.

You have the right to opt-out of any marketing communications by the following methods:

using the unsubscribe feature within the email;
replying to the message and requesting unsubscribing; or
sending an email to support@hammerheadtech.co.uk.

We will maintain an extremely small unsubscribed list in order to comply with your wishes and ensure no more marketing emails are sent.

Unsubscribing from marketing does not mean we will not send necessary information regarding an ongoing inquiry, agreement, project, invoice, security or service.

We do not sell your personal information.

Where required, we may disclose relevant information to:

web hosting, cloud infrastructure and data-backup service providers;
email, communications and customer-management service providers;
web developers, web maintenance and security service providers;
analytics service providers, including Google;
newsletters and marketing platform service providers;
payments, accounting and billing service providers;
professional advisors, including accountants, auditors, insurers and lawyers;
approved employees, contractors and subcontractors in providing the services;
regulatory, judicial, law enforcement and other government agencies when required by law; and
potential buyers, investors or advisors in a business sale or merger.

Service providers who process personal information on our behalf must secure it and only use it for permitted purposes.

We may also disclose information as required to protect our interests, systems, customers, staff and the general public.

International Data Transfers

Some third party service providers, cloud infrastructure providers, and technical partners may process personal data outside the UK.

If there is a restricted international transfer, we will ensure that we do what we can to safeguard the information. This may depend on the destination country and could involve the following measures:

Transfer of the information to a country which falls under the UK Adequacy Regulations;
UK International Data Transfer Agreement;
Approved UK Addendum to the Standard Contractual Clauses;
Contractual, technical, and organisational safeguards; or
Some other transfer mechanism authorised under data protection laws.

Please contact us should you require any more information regarding safeguards relating to your personal information.

How Long We Keep Personal Information

We will retain personal data only for as long as necessary for the purposes for which the data were collected, taking into account legal, accounting, security and reporting requirements.

Our typical policy on retaining data is:

General enquiries that are not converted into client engagements: usually for up to 24 months from the last communication.
Client, supplier, contractual and project data: for the duration of the relationship and for up to six years after, unless a longer or shorter time period is warranted.
Financial, payment and tax data: for the period required by the applicable financial and tax laws.
Newsletter and marketing information: until you unsubscribe, withdraw consent or we decide that the information is no longer current or relevant.
Marketing suppression data: for the duration necessary to honour your request to unsubscribe or suppress marketing communications.
Cookies and analytics data: for the period based on the relevant cookie life cycle and your privacy settings.
Website security and diagnostic logs: for the limited period appropriate to the purpose.

Where there is a legal requirement, where there is a dispute or legal proceedings in progress, or when there is a need to look into suspected fraud and security issues, we can keep data longer.

Once the personal data is no longer needed, we will remove it, destroy it or make sure that it cannot identify any individual anymore.

How We Protect Personal Information

We employ technical and organisational safeguards that are suitable for preventing personal data from being subject to the following:

unauthorised access;
accidental loss;
misuse;
alteration;
disclosure; and
destruction.

Such safeguards may include, but not be limited to, access control, authentication, encryption when required, security monitoring, backups, software updates, personnel management and contractual agreements with service providers.

Access to personal data is granted solely to those individuals who have a legitimate need for it.

Neither a website, an email service nor any internet communication can be made completely secure. Do not provide us with confidential and/or very sensitive information through an unprotected inquiry form.

Your Data Protection Rights

Under certain conditions, UK data protection law will entitle you to:

receive notification on how your personal data is being processed;
obtain access to the personal data that we have about you;
ask for rectification of any incorrect or incomplete information;
ask for the deletion of your personal data under certain conditions;
ask for restrictions on processing under certain conditions;
oppose processing based on legitimate interest;
oppose direct marketing at any time;
obtain data portability in case of meeting the relevant legal conditions; and
Withdraw your consent at any time when processing is based on consent.

The above-listed rights may be limited or exempted from legal conditions.

To exercise a right, please email support@hammerheadtech.co.uk with the following subject heading “Data Protection Request”.

Kindly state your requirements clearly to allow us to locate the relevant files. We may require some proof regarding your identity before complying with any such request.

The exercise of rights related to data protection usually does not involve any charges. However, a charge may be levied if the request made is obviously unfounded, excessive, or repetitive.

How to Make a Complaint

If you have any queries or concerns regarding the processing of your personal data, please contact us in advance, and we will consider and address your queries or concerns.

You also have the right to lodge a complaint with the Information Commissioner’s Office, which is the UK supervisory authority for data protection.

Information Commissioner’s Office

Website: Submit a complaint to the ICO

Telephone: 0303 123 1113

Children’s Privacy

Our website and services are designed for commercial use only. They are not meant for children, and we do not knowingly collect any personal information from children using the website.

Should you become aware of any instance in which personal information is collected from a child via our website, we ask that you contact us so that we can consider deleting such information.

Third-Party Websites

Our website may include links to third-party websites, social networks, applications and platforms.

Using an external link might allow the third party to collect and process information in accordance with its privacy policy. The third-party services and their privacy policies are not within our control, and we are not responsible for them.

Please check the privacy policy of the third party concerned before you provide any personal information or use the service provided.

Changes to This Privacy Policy

This Privacy Policy may be revised whenever there are changes in our website, services, service providers, business operations, and legal requirements.

The most up-to-date version will be available on this page and will be marked by the date of revision. If a revision substantially modifies our usage of personal information, we may notify you of this separately.

How to Contact Us

To ask questions concerning privacy, for data protection queries or concerns about this policy, please contact us at:

Hammerhead Technologies Ltd
Belmont Suite
Paragon Business Park
Chorley New Road
Horwich, Bolton
England, BL6 6HG

Email: support@hammerheadtech.co.uk

You may also reach our team via our contact form.

Table of Contents