Privacy notice

Harber Glaves Limited is the controller of the personal data described in this notice. We are a company registered in England and Wales.

Company

Harber Glaves Limited

Number

17162810

Office

SIU Offices, 4-6 Greatorex Street, London E1 5NF, United Kingdom

Contact

hello@harberglaves.com

We have not appointed a data protection officer, because we are not required to. Data protection questions go to the address above and reach a person, not a queue.

This notice covers harberglaves.com and the back office behind it. The other businesses in the group run their own sites and publish their own privacy notices; where you deal with one of those, its notice applies to that dealing rather than this one.

This site does not sell anything and has no public sign-up. We hold three things.

• What you send us. If you email hello@harberglaves.com we hold your email address, your name if you give it, and whatever is in the message and its attachments.
• Back office accounts. The private area at /admin is for the people who run the group. For each of them we hold an email address and sign-in records. Sign-in uses a link sent by email, so we hold no passwords.
• Technical records. Our hosting provider records the usual request data — IP address, browser and device type, the page requested and the time — which we use to keep the site available and secure.

We do not knowingly collect special category data, and there is nowhere on this site to give it to us. Please do not send it by email either.

• Replying to you — legitimate interests. If you write to a business about working together, an answer is what you were expecting.
• Running the back office — legitimate interests, being our interest in operating our own company systems securely and knowing who signed in.
• Keeping the site up and secure — legitimate interests, being our interest in a site that works and resists abuse.
• Analytics — consent, and only if you give it. No analytics tool is in use at the time of writing. If we add one it will not load until you accept it in the cookie banner, and you can change your mind at any time on the cookie page.

Where we rely on legitimate interests we have considered whether our interest is overridden by your rights and concluded that it is not, for the narrow uses above. You can object — see section 8.

We do not sell personal data, we do not share it for anyone else's marketing, and we do not pass it between the businesses in the group for unrelated purposes. We do use a small number of suppliers who process data on our instructions:

• Vercel — hosting and delivery of this site, and the request logs that come with it.
• Supabase — authentication and the database behind the back office.
• Our email provider — receiving and storing correspondence sent to us.

We will also disclose data where the law requires it, or to establish or defend legal claims, and we would share it with a buyer if the company or part of it were ever sold.

Some of the suppliers above are based outside the United Kingdom, or use infrastructure that is. Where personal data leaves the UK we rely on the UK International Data Transfer Agreement, or the UK Addendum to the European Commission standard contractual clauses, together with the supplier's own technical measures. You can ask us for details of the safeguards that apply to a particular transfer.

• Correspondence — up to 24 months after our last exchange, unless it relates to a live matter, in which case for as long as that matter runs.
• Back office accounts — for as long as the person needs access, deleted within 30 days of them leaving.
• Technical records — kept briefly by our hosting provider for security and operations, then discarded.

Under the UK GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it is wrong, or complete it if it is partial;
• delete it, where we have no continuing reason to hold it;
• restrict what we do with it while a question about it is resolved;
• hand it over in a portable form, where that right applies;
• stop using it where we rely on legitimate interests; and
• withdraw consent, where consent is what we relied on.

Email hello@harberglaves.com and we will respond within one month. There is no charge. We make no automated decisions that produce legal or similarly significant effects, and we do not profile you.

If you think we have handled your data badly, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk/make-a-complaint or on 0303 123 1113. Complaining to us first does not affect that right.

The site is served over HTTPS, the back office is restricted to named accounts, and the database behind it rejects access that does not come through our server. No system is perfect, and we will tell you and the ICO where the law requires it if something goes wrong.

This is a business-to-business site. It is not directed at children and we do not knowingly collect data about them.

When this notice changes we update the date at the top of the page. Where a change materially affects how we use data we already hold, we will take reasonable steps to tell the people affected rather than relying on them re-reading this page.