Privacy policy

Herdr Ltd ("Herdr", "we", "us") is the controller of the personal data described here. We're a company registered in England and Wales (company number 17314599), with our registered office at 66 Paul Street, London EC2A 4NA.

Questions, or want to exercise your rights? Email privacy@herdr.co.

What this policy covers

This policy explains how we handle personal data when you visit herdr.co or get in touch with us.

Where we process a client's customer data on their instructions, we act as their processor under our agreement with them. The client's privacy notice explains that use of their customers' data.

The data we collect

When you request a consultation, we collect:

• your name;
• your company;
• your email;
• your phone number;
• what you tell us about your business, current marketing and priorities;
• with analytics consent, campaign-source information such as UTM parameters, your landing page and referring page; advertising click identifiers, such as gclid and fbclid, also require advertising consent.

We use these details to reply to your request and to know which campaign brought you to us.

When you use the site, our host records your IP address and technical request information in access logs to help keep the site secure and available.

Cookies and similar technologies: see Cookies below.

Please don't include sensitive information (such as health, ethnicity, or political views) in the free-text field. We don't ask for it and don't need it.

Why we use it, and our lawful basis

• Responding to and assessing your inquiry, and sending you a confirmation: to handle business inquiries and decide whether we can help. Lawful basis: our legitimate interests in running and growing our business. Where we take steps you request toward a contract with you, we rely on the pre-contractual steps basis.
• Detecting and preventing spam and abuse of the form: to keep the form and our inbox usable. Lawful basis: our legitimate interests in protecting our systems.
• Keeping the website secure and available (server logs). Lawful basis: our legitimate interests in securing our site.
• Measuring site visits, inquiries and campaign sources: your consent, which you give or refuse through our cookie banner. We do not send your form answers or contact details to Google Analytics.
• Remembering and applying your privacy choices: to meet our legal obligations concerning consent. CookieYes records your choices so we can apply and demonstrate them.

You can object to processing based on our legitimate interests. See Your rights below.

Cookies

Optional analytics and advertising storage is controlled by your choices in our CookieYes banner. You can change your choice at any time from cookie settings, or control cookies in your browser.

• Strictly necessary: always on. For example, remembering your privacy choices and the light or dark theme you select.
• Analytics: set only with your consent. We use Google Analytics 4 to understand visits and completed inquiries. With this choice enabled, our site also remembers campaign and landing-page information during your browser session.
• Advertising attribution: with analytics and advertising consent, we also remember advertising click identifiers during your browser session and include them with your inquiry. This helps connect an inquiry to the advertisement that brought you here.

Our Cookies page lists the cookies and browser storage, their purposes and durations. You can still use the site and send an inquiry if you reject optional cookies.

Who we share it with

We share personal data only with the providers that help us run Herdr:

• Hosting, inquiry-processing and email providers: operate the website, deliver and store inquiries, and support our correspondence with you;
• CookieYes: provides the consent banner and records privacy choices;
• Google Analytics: receives site-usage and inquiry-event information when you allow analytics. Read how Google uses this information.

We may also share data with our professional advisers, or where the law requires it. We don't sell your personal data.

Sending data outside the UK

Providers may process personal data outside the UK. Where UK international-transfer rules apply, transfers need an applicable adequacy arrangement or appropriate safeguards, such as approved contractual terms.

Contact privacy@herdr.co for information about the providers handling your data and the safeguards relevant to a particular transfer.

How long we keep it

• Inquiry correspondence: for as long as needed to handle your request, follow up on an ongoing discussion and resolve related questions or claims.
• Client and business records: for the working relationship and any further period needed for legal, tax and accounting obligations. Different records may need different periods.
• Security logs: for the period needed to investigate faults, detect abuse and protect the service.
• Google Analytics: the current property retains user and event data for 14 months. The user-data period resets when you return with analytics enabled. These settings do not determine how long Google keeps aggregated standard reports.
• Browser storage: the durations on our Cookies page apply. Withdrawing consent clears the site's optional attribution storage and stops further analytics collection; it does not automatically erase information already received.

Your rights

Depending on the circumstances and applicable law, you can:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected, or data erased;
• restrict or object to how we use it, including objecting to processing based on our legitimate interests, and to any direct marketing;
• ask us to transfer certain data to another provider;
• withdraw your cookie consent at any time.

To exercise any of these, email privacy@herdr.co. Requests are normally free and handled within one month. Where the law permits extra time or requires further information, we'll explain this to you.

If you're unhappy with how we've handled your data, you can contact us at privacy@herdr.co. You also have the right to complain to the Information Commissioner's Office.

Automated decisions

We don't make decisions with legal or similarly significant effects about you using automated processing alone.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed, and we'll flag any significant changes.

Contact

Herdr Ltd, 66 Paul Street, London EC2A 4NA. privacy@herdr.co.