Legal
Privacy Policy
Last updated: 1 September 2026
Who we are
Hashton Agency (“Hashton”, “we”, “us”) provides websites, apps, and AI automation for small businesses. This policy explains how we handle personal information when you visit hashton.agency or contact us.
Controller contact: contact@hashton.agency
What we collect
Information you send us — for example your name, email address, business details, and project notes when you use the contact form, book a call, or email contact@hashton.agency. Bookings on /book are handled by Cal.com.
Technical data that may be collected automatically when you browse the site — such as IP address, browser type, device information, and pages viewed — if analytics or hosting logs are enabled.
We do not ask for payment card details on this marketing site.
How we use information
To reply to enquiries and schedule calls.
To deliver and improve services you ask us to provide.
To operate, secure, and understand use of this website.
To meet legal or accounting obligations where required.
Legal bases (UK GDPR)
Contract / steps prior to contract — when you ask us to quote or deliver work.
Legitimate interests — running a business website, responding to messages, and keeping services secure, balanced against your rights.
Consent — where we rely on it (for example optional cookies or marketing), you can withdraw it at any time.
Legal obligation — where the law requires us to keep or disclose information.
Cookies and analytics
This site uses essential cookies needed for security and basic operation, and Google Analytics to understand traffic and performance.
Google Analytics may set cookies or similar technologies. You can control cookies through your browser settings. Blocking some cookies may affect how the site works.
Sharing
We do not sell your personal information.
We may share data with service providers who help us run the site or business (for example hosting, email delivery for the contact form, Cal.com for scheduling, or Google Analytics), only as needed for those purposes and under appropriate agreements.
We may disclose information if required by law or to protect rights, safety, or security.
International transfers
Some providers may process data outside the UK. Where that happens, we use appropriate safeguards required by UK data protection law (such as adequacy decisions or standard contractual clauses) where applicable.
Retention
Enquiry and project communications are kept as long as needed to handle your request, deliver work, and meet legal or accounting requirements, then deleted or anonymised when no longer needed.
Server and analytics logs are typically retained for shorter operational periods.
Your rights
Under UK GDPR you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability where applicable. Where processing is based on consent, you may withdraw consent.
To exercise these rights, email contact@hashton.agency. You can also complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.
Children
This site and our services are aimed at businesses and adults. We do not knowingly collect personal information from children.
Changes
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after changes means you accept the updated policy.
Contact
Questions about privacy: contact@hashton.agency