Privacy Policy

This website, heseven.com, is run by Heseven Ltd, 72 Shelton Street, London WC2H 9JQ, United Kingdom (“Heseven”, “we”, “us”). We are the controller of the personal data described in this policy.

If you have any questions about this policy or how we handle your data, email us at info@heseven.com.

When you send an enquiry. Our quote form asks what you need, your budget and timeline, a short message, your name and email address, and optionally your website and country. We receive whatever you choose to tell us.

When you email us. Your email address, the content of your message and any attachments.

Technical data. Like every website, our hosting provider processes your IP address, browser type and the pages you request so the site can be delivered and protected from abuse. When you submit the form, a spam check also uses technical signals from your browser.

Analytics and advertising data — only with your consent. If you click “Accept” on our cookie banner, we use the Meta Pixel (and, where enabled, Google Analytics) to understand how visitors use the site and to measure our advertising. This involves cookies and identifiers described in the cookies section. If you click “Reject”, none of these tools load.

We do not ask for special category data, and we ask you not to send it to us.

• To reply to your enquiry and prepare a proposal — because you asked us to (steps before entering into a contract) and our legitimate interest in responding to people who contact us.
• To deliver and secure the website, prevent spam and fraud — our legitimate interest in running a safe, working website.
• To measure the site and our advertising (Meta Pixel, Google Analytics) — your consent, which you can withdraw at any time.
• To keep business and accounting records if you become a client — our legal obligations.

We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

When you first visit, a banner asks whether you accept analytics and advertising cookies. Your choice is saved in your browser's local storage (under the name hs-consent) so we don't ask again on every page.

• Strictly necessary: storing your cookie choice, and security features of our hosting and spam protection. These don't need consent.
• Advertising (with consent): the Meta Pixel sets cookies such as _fbp to measure visits and the results of our ads on Facebook and Instagram.
• Analytics (with consent, where enabled): Google Analytics sets cookies such as _ga to count visits and see how pages are used.

You can change your mind at any time with the Cookie settings link in the footer of every page, or by clearing this site's data in your browser.

We use a small number of trusted service providers who process data on our behalf and only as we instruct:

• Cloudflare — website hosting, security and the Turnstile spam check on our form.
• Resend — delivers enquiries from our form to our inbox.
• Google — our email inbox (Gmail / Google Workspace) and, where enabled and only with your consent, Google Analytics.
• Meta Platforms — the Meta Pixel, only with your consent.

Our website content is managed in Sanity, which stores our pages and articles but not visitor data. We may also share data where the law requires it, or with professional advisers under a duty of confidentiality.

Some of our providers process data outside the UK, including in the United States. Where they do, the transfer is protected by an adequacy decision (such as the UK Extension to the EU–US Data Privacy Framework) or by appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

• Enquiries that don't lead to a project: up to 24 months after our last contact, then deleted.
• Client records: for the length of our working relationship and up to six years afterwards, to meet legal and accounting requirements.
• Analytics and advertising data: for the periods set by Google and Meta, which you can find in their own privacy policies.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct or delete it;
• ask us to restrict how we use it, or object to our use of it;
• receive it in a portable format; and
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, email info@heseven.com. We will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk — but we would appreciate the chance to put things right first.

Our website is served over HTTPS, and we limit access to enquiries to the people who need it to reply. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your data.

Our services are for businesses. This website is not aimed at children, and we do not knowingly collect data from anyone under 16.

We may update this policy from time to time, for example when we add a new tool to the website. The date at the top of this page shows when it was last changed.