Legal
GDPR Commitment
Effective date: 1 January 2026 · Huro Data Technologies Ltd.
Huro Data Technologies Ltd. is committed to protecting the personal data of everyone who interacts with our website and services. This page summarises how we meet our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
Huro Data Technologies Ltd. is the data controller for personal data collected through this website. For all data protection enquiries, contact us at info@hurodata.com.
2. Lawful Basis for Processing
We process personal data only where we have a lawful basis to do so:
- Legitimate interests — to respond to enquiries submitted via our contact form.
- Contract performance — to fulfil obligations under any consultancy engagement.
- Legal obligation — where required by applicable law.
3. Data Minimisation
We collect only the personal data necessary for the specific purpose for which it is collected. We do not collect data speculatively or for undefined future use.
4. Security Measures
We implement appropriate technical and organisational measures to protect personal data, including:
- TLS encryption for all data in transit
- Access controls limiting data access to authorised personnel only
- Hosting on ISO 27001 and SOC 2 Type II certified infrastructure
- No use of analytics or tracking technologies on this website
5. Data Retention
We retain personal data only for as long as necessary. Enquiry and correspondence data is held for up to two years from the date of last contact, or for the duration of any engagement plus one year. Data is securely deleted after the applicable retention period.
6. Third-Party Processors
Where we engage third-party processors (such as our email delivery provider and hosting infrastructure), we ensure appropriate data processing agreements are in place. We do not sell or share personal data for marketing purposes.
7. Your Rights
Under UK GDPR you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your personal data.
- Restriction — ask us to limit how we process your data.
- Objection — object to processing based on legitimate interests.
- Portability — receive your data in a structured, machine-readable format.
To exercise any of these rights, contact us at info@hurodata.com. We will respond within one calendar month as required by UK GDPR.
8. Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk/concerns or by calling 0303 123 1113.