Privacy Policy — Heron RiskTech Advisors Ltd

Last updated: August 2026

Heron RiskTech Advisors Ltd (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with UK GDPR and the Data Protection Act 2018.

1. Who we are

Heron RiskTech Advisors Ltd Registered in England & Wales Company No: [insert] Registered Office: [insert] Email: contact@heronrisktech.com

We act as the Data Controller for the personal data collected through this website.

2. What personal data we collect

We may collect the following information:

  • Contact details (name, email, organisation)

  • Information submitted via our contact form

  • Technical data (IP address, browser type, device information)

  • Usage data (pages visited, time on site, interactions)

  • Cookies (see Cookie Policy)

We do not collect special category data unless explicitly provided by you.

3. How we use your data

We use your data to:

  • Respond to enquiries

  • Provide consultancy services

  • Improve our website and user experience

  • Maintain security and performance

  • Comply with legal obligations

We do not sell or share your data with third parties for marketing.

4. Legal basis for processing

We process your data under:

  • Legitimate interests (responding to enquiries, improving our site)

  • Contractual necessity (providing consultancy services)

  • Consent (analytics cookies, newsletter sign‑ups)

  • Legal obligation (record‑keeping, compliance)

5. Data sharing

We may share data with:

  • Website hosting and analytics providers

  • Professional advisers (legal, accounting)

  • Regulatory authorities if required by law

All third parties are required to protect your data.

6. Data retention

We retain personal data only as long as necessary:

  • Enquiry data: up to 12 months

  • Client data: up to 7 years for legal and accounting purposes

  • Analytics data: per provider retention policies

7. Your rights

Under UK GDPR, you have the right to:

  • Access your data

  • Correct inaccurate data

  • Request deletion

  • Object to processing

  • Request data portability

  • Withdraw consent (where applicable)

Contact us at stevecloutman@heronrisk.com to exercise these rights.

8. Security

We use appropriate technical and organisational measures to protect your data.

9. Contact

For privacy enquiries: stevecloutman@heronrisk.com