How we handle your data.

1. Who We Are

This website is operated by:

Hashira Consulting Limited
Company Number: 15853293
Registered Office: 84 Rayden Crescent, Westhoughton, Bolton, BL5 2HY
Email: [email protected]

Hashira Consulting Limited is the data controller for the purposes of the UK GDPR and EU GDPR.

2. What Personal Data We Collect

When you interact with this website, we may collect:

• Contact form submissions: name, email address, company name, and the details of your enquiry
• Email correspondence: whatever you choose to share when emailing us directly
• Technical data: IP address, browser type, device information, country (via Cloudflare for language routing)
• Analytics data: aggregated, anonymous usage statistics via Umami (no cookies, no personal tracking)

3. How We Use Your Data

We use your data to:

• Respond to your enquiries and conduct introductory calls
• Deliver consulting services if we begin a working relationship
• Send relevant updates if you've explicitly agreed to receive them
• Operate, secure, and improve the website
• Comply with our legal and accounting obligations

We never sell your data. We only share it with third parties as described in Section 8, or when legally required.

4. Legal Basis for Processing

We rely on the following legal grounds under the UK and EU GDPR:

• Legitimate interest (Article 6(1)(f)): responding to B2B enquiries, operating the website, fraud prevention
• Performance of a contract (Article 6(1)(b)): processing client data during an active engagement
• Consent (Article 6(1)(a)): non-essential cookies, marketing communications
• Legal obligation (Article 6(1)(c)): UK accounting and tax record retention

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

5. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”), subject to our legal retention obligations
• Withdraw your consent at any time
• Object to or restrict processing
• Request data portability
• Lodge a complaint with a supervisory authority (UK ICO, Czech ÚOOÚ, or your local DPA)

To exercise any of these rights, contact us at [email protected]. We respond within 30 days.

6. Data Retention

We retain your personal data only as long as necessary:

• Contact form / enquiry data: 24 months, or until you request deletion
• Active client records: for the duration of our engagement
• Past client business records: 7 years after our last engagement, as required by UK accounting law (Companies Act 2006, HMRC retention rules)
• Email correspondence: 24 months, unless required for active or legal matters
• Analytics data (Umami): aggregated indefinitely, no personal identifiers stored

7. Cookies and Consent Management

We use Cookiebot to manage cookie consent on this website. When you visit hashira.consulting for the first time, a banner asks for your preferences. You can review or change your consent at any time using the consent banner or by clearing your browser cookies.

You can also re-open consent settings at any time:

Open cookie consent settings →

8. Third-Party Services

We use the following third-party services on this website. Each has its own privacy policy, linked below:

• Brevo (functional) — contact form submission delivery and any email subscription you opt into. Brevo privacy policy →
• Cloudflare (functional) — content delivery, security, and visitor country detection for automatic language routing. IP addresses are processed at the edge but not stored by us. Cloudflare privacy policy →
• Cookiebot (functional) — manages your cookie preferences. Cookiebot privacy policy →
• Umami Cloud (statistics) — privacy-focused, cookieless analytics. No personal identifiers, no cross-site tracking. Umami privacy policy →
• Google Fonts (functional) — font delivery. When loading fonts, Google receives your IP address. Google privacy policy →

9. Cookie Declaration

Below is the current list of cookies and tracking technologies used on this website, automatically generated and kept current by Cookiebot:

10. Data Security

We take appropriate technical and organisational measures to protect your data:

• HTTPS encryption for all data in transit (TLS 1.2 or higher)
• Access controls on internal systems and client records
• Reputable third-party providers (Brevo, Cloudflare, Umami) with their own GDPR compliance
• No client business data stored on this website — only contact form submissions, which are forwarded and not retained on the public server

11. International Data Transfers

Hashira Consulting Limited is based in the United Kingdom. Some of our third-party providers process data outside the UK or EU/EEA (notably in the United States). Where this happens, we ensure:

• Adequate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions
• UK-US Data Bridge or EU-US Data Privacy Framework participation where applicable
• Compliance with all applicable data protection regulations

12. EU Representation

Hashira Consulting Limited is a UK-based consultancy. We primarily serve clients in the UK, with occasional engagements in the European Union.

At present, our processing of EU resident data is occasional and low-risk: limited to B2B enquiries, contractual communications, and individual client engagements. We do not engage in large-scale processing, automated decision-making, or processing of special categories of personal data. On this basis, we currently rely on the exemption under Article 27(2)(a) of the EU GDPR from the requirement to appoint an EU representative.

We review this position periodically. If our processing activities expand — for example, through systematic marketing to EU prospects or a substantial increase in EU client volume — we will appoint an EU representative and update this policy accordingly.

13. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or operational changes. The “Last Updated” date at the top of the page will reflect the most recent revision. Material changes will be communicated directly where appropriate.

14. Contact Us

If you have questions or concerns about how we handle your personal data, or wish to exercise your rights, please contact:

[email protected]
Hashira Consulting Limited
84 Rayden Crescent, Westhoughton, Bolton, BL5 2HY