Privacy Policy

Hearthly takes the privacy of those who visit and use this website seriously. This policy explains what personal information may be collected, how it is used, and what rights you hold in relation to it. It applies to all visitors and anyone who contacts us through this website.

The nature of our work — supporting families with their financial affairs — means discretion is not an afterthought. It shapes how we handle every piece of information, including what you share with us here.

1. Data We Collect

We collect only what is necessary for the purpose it is gathered. This may include:

• — Contact form submissions: your name, email address, optional subject line, and message content when you reach out through our contact form.
• — Usage data: anonymised analytics about how pages are visited, which pages are viewed, and general browsing behaviour — used to improve the website, not to identify individuals.
• — Cookie data: preferences stored locally in your browser when you interact with the cookie consent tool. See our Cookie Policy for full details.
• — Technical data: IP address, browser type, device type, and referral source, collected automatically by web hosting infrastructure. This data is not linked to any individual profile.

2. Legal Basis for Processing

• — Consent: where you have actively chosen to submit a form or accept cookies.
• — Legitimate interests: to operate and improve this website, and to respond to genuine enquiries from visitors.
• — Contractual necessity: where processing is required to respond to an enquiry or provide a service requested by the visitor.

3. How We Use Your Data

• — To respond to enquiries and messages sent through the contact form.
• — To understand how our website is used and to improve its content and structure.
• — To maintain the security and proper functioning of the website.
• — We do not use personal data for unsolicited marketing. We do not sell or share personal data with third parties for their own commercial purposes.

4. Data Sharing and Third Parties

We do not sell personal data. Limited sharing may occur in the following circumstances:

• — Hosting and infrastructure providers — who process data on our behalf under appropriate data processing agreements.
• — Analytics providers — who receive anonymised usage data to help us understand site performance, subject to your cookie preferences.
• — Legal obligations — if required by law or regulatory authority.

5. How Long We Keep Data

Contact form data is retained for as long as necessary to respond to the enquiry, and no longer than 24 months unless an ongoing relationship requires otherwise. Anonymised analytics data may be held for up to 36 months. Cookie consent records are stored locally in your browser and can be cleared at any time.

6. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Transmissions to this website use HTTPS encryption. Access to any contact data is limited to those who need it to respond to your enquiry.

In the unlikely event of a data breach that affects your personal information, we will notify you and any relevant authorities as required by applicable law.

7. Your Rights

Depending on your location, you may hold some or all of the following rights regarding your personal data:

• — Right of access — to request a copy of the personal data we hold about you.
• — Right to rectification — to request correction of inaccurate data.
• — Right to erasure — to request deletion of your personal data where there is no longer a lawful basis for its retention.
• — Right to data portability — to receive your data in a structured, commonly used format.
• — Right to object — to object to processing based on legitimate interests.
• — Right to withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, please use our contact page. We will respond without undue delay.

8. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected with a revised "last updated" date at the top of this page. Continued use of the website after such changes constitutes acceptance of the updated policy.