Privacy Policy

Welcome to High and Low Technologies. We are committed to protecting the privacy and security of our clients’ and website visitors’ personal data. This Privacy Policy outlines how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

By using our website and submitting your information, you acknowledge that you have read this policy and understand how your personal data will be processed as described herein.

We collect personal data directly from you when you voluntarily fill out the contact form on our website. The information we collect is limited to what is necessary for our business purposes and includes:  
- First Name & Last Name: To identify you, communicate respectfully, and address you personally.
- Email Address: To respond to your inquiry and communicate with you regarding your request.
- Company Name (Optional): To understand the business context of your inquiry, if applicable.
- Nature of Inquiry: To route your message to the appropriate department or team member.
- Inquiry Details: To review the specific context, requirements, or questions you have submitted and provide an accurate response or assistance.

Under the GDPR, High and Low Technologies acts as the Data Controller for the personal data collected through this website. We process your personal data under the following legal bases:
- Contractual Obligations / Pre-Contractual Steps (Art. 6(1)(b) GDPR): To review your inquiry, assess project or service requirements, prepare responses/quotes, and communicate regarding potential or ongoing work.
- Legitimate Interests (Art. 6(1)(f) GDPR): For administrative purposes, maintaining records of incoming communications, managing client relationships, and ensuring effective operational responses.

Specifically, we use your personal data to:
- Contact you via email at info@hi-n-lowtechnology.co.uk or the email address provided in your form submission.
- Address and fulfill the specific nature and details of your inquiry.
- Maintain internal operational records.

We will not use your details for unsolicited marketing unless you explicitly opt in, and we will never sell, lease, or distribute your personal data to third parties for commercial purposes.

To fulfill your request or deliver our services, we may share your inquiry details with trusted contractors, technical partners, or service providers who act as Data Processors on our behalf. This is done strictly for assessing your request, providing relevant technical expertise, and fulfilling requested services.

All third-party processors are bound by contractual agreements requiring them to maintain strict confidentiality and apply security measures aligned with GDPR standards.

We may also disclose your personal data if required to do so by law, court order, or regulatory body.

If your personal data is transferred or accessed outside the UK or European Economic Area (EEA), we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to guarantee your data receives an equivalent level of protection.

We take data security seriously. We have implemented appropriate technical and organizational measures to safeguard your personal data against loss, destruction, unauthorized access, alteration, or disclosure.

We retain your personal data only for as long as necessary to resolve your inquiry or fulfill the purposes outlined above, or to comply with statutory legal and accounting retention periods. Once no longer required, your personal data will be securely deleted or anonymized.

Under the GDPR, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of any inaccurate or incomplete personal data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no legal reason for us to keep processing it.
- Right to Restrict Processing: Request temporary restriction on how we process your personal data.
- Right to Data Portability: Request transfer of your data to yourself or another controller.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing relies on consent.

To exercise any of these rights, please contact us at info@hnlt.co.uk We will respond within one month.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) (www.ico.org.uk).

We may update this policy periodically to reflect operational, legal, or regulatory updates. Any changes will be published on this page.

If you have any questions about this Privacy Policy or how your data is handled, please contact us:
- Data Controller: High and Low Technologies
- Email:info@hnlt.co.uk