Privacy & Cookie Policy

This Privacy & Cookie Policy explains how Harbourline Operations Group (“Harbourline”, “we”, “us”) collects, uses, shares, and protects personal information when you visit our website, communicate with us, or engage with our services. It is written to support compliance with the UK GDPR and Data Protection Act 2018, the EU GDPR, and relevant U.S. privacy laws (including California’s CCPA/CPRA where applicable).

1. Who we are

Controller: Harbourline Operations Group (or the Harbourline entity identified in your engagement documentation).
Contact: enquiries@harbourline.com

2. Information we collect

• Contact and identity data (e.g., name, business email, phone number, organisation, role).
• Inquiry and engagement data (e.g., messages you send, meeting details, project requirements, correspondence).
• Website and device data (e.g., IP address, browser type, device identifiers, pages viewed, approximate location derived from IP).
• Cookies and similar technologies as described in Section 7.

3. How we use your information

• To respond to enquiries and provide information you request.
• To manage professional relationships, proposals, and service delivery communications.
• To maintain the security and performance of our website and systems.
• To understand website usage and improve our content and services (where you consent to analytics cookies).
• To comply with legal obligations, resolve disputes, and enforce agreements.

4. Legal bases (UK/EU GDPR)

Where the UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases:

• Legitimate interests (e.g., responding to B2B enquiries, improving our services, preventing fraud), balanced against your rights.
• Contract (e.g., steps at your request prior to entering into a contract, or performing an agreement with you/your organisation).
• Legal obligation (e.g., compliance with applicable laws and regulations).
• Consent (e.g., for non-essential cookies and certain marketing where required by law).

5. Sharing your information

We do not sell personal information. We may share personal information with:

• Service providers that help us operate our website and business (e.g., hosting, security, analytics where consented), under contract and confidentiality obligations.
• Professional advisers (e.g., legal, audit, insurance) where necessary.
• Authorities where required by law, regulation, or to protect rights and safety.

6. International transfers

Your information may be processed in countries outside the UK/EEA. Where required, we use appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, EU Standard Contractual Clauses (SCCs), or other lawful transfer mechanisms, together with supplementary measures as appropriate.

7. Cookies & similar technologies

Cookies are small files stored on your device. We use:

• Essential cookies — required for core site functionality, security, and preference management.
• Analytics cookies — help us understand how visitors use the site (set only if you consent).
• Marketing/partner cookies — used to measure campaigns or tailor communications (set only if you consent, if used).

You can manage your choices at any time using the cookie preferences controls available on the site (including the floating cookie icon where present) and through your browser settings.

8. Data retention

We retain personal information only as long as necessary for the purposes described above, including to meet legal, accounting, or reporting obligations. Retention periods may vary depending on the nature of the data and the context of our relationship.

9. Security

We use administrative, technical, and organisational safeguards designed to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

10. Your rights

UK/EU rights

If the UK GDPR or EU GDPR applies, you may have rights to:

• Access, rectify, or erase your personal data.
• Restrict or object to processing (including objection to processing based on legitimate interests).
• Data portability (in certain circumstances).
• Withdraw consent at any time where processing is based on consent (without affecting prior processing).

You also have the right to lodge a complaint with a supervisory authority. In the UK this is the Information Commissioner’s Office (ICO); in the EEA you may contact your local data protection authority.

U.S. privacy rights (including California)

Depending on where you live and applicable law, you may have rights regarding your personal information, such as the right to know/access, delete, correct, or opt out of certain processing. Harbourline does not sell personal information. If we engage in targeted advertising or “sharing” as defined by certain U.S. laws, we will provide an opt-out mechanism where required.

11. Children

Our website and services are not directed to children and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can take appropriate steps.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the “Last updated” date above.

13. How to contact us

For privacy requests or questions, contact: enquiries@harbourline.com