Privacy Policy

Effective Date: June 22, 2026

Website: https://hadesbollards.co.uk/

Data Controller: Hades Bollards (“the Company”, “we”, “us”, or “our”)

Data Protection Contact: privacy@hadesbollards.co.uk

1. Overview and Scope of Governance

Hades Bollards operates as a primary Data Controller regarding the personal and corporate data collected through our digital operations. This Privacy Policy governs all processing activities of personal data collected online via our official web domain and associated procurement portals. It does not apply to offline data collection or channels outside this website.

Our data architecture is engineered to respect individual privacy rights while ensuring compliance with international data protection frameworks, including the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and the California Consumer Privacy Act (CCPA).

2. Legal Basis for Data Processing

Under Article 6 of the UK/EU GDPR, we only process personal data when a valid legal framework exists. We rely on the following pillars:

• Contractual Necessity: To execute commercial orders, process payments, and coordinate delivery/installation logistics for physical security barriers.

• Legitimate Interests: To secure our web infrastructure, optimize user experience, conduct internal business analytics, and prevent fraud. This includes “recognised legitimate interests” under current UK statutory revisions for business security.

• Legal Obligation: To fulfill tax accounting requirements, statutory audits, or law enforcement disclosure mandates.

• Explicit Consent: For targeted marketing initiatives and specific third-party cookies where consent has been actively granted via our Consent Management Platform (CMP).

3. Granular Data Categories Collected

3.1 Data Provided Directly by You

• Corporate Identity & Contact Data: Full name, corporate email address, telephone numbers, business name, and physical installation or shipping addresses.

• Communication Content: Metadata, attachments, text, or specifications sent through corporate contact forms, RFQ (Request for Quote) portals, or direct correspondence.

• Account Credentials: Usernames, encrypted password tokens, and account permission tiers used to access private commercial portals.

3.2 Automated Technical Data Collection

• System Log Files: Internet Protocol (IP) addresses, browser variants, Internet Service Provider (ISP) tags, exact date/time stamps, referring or exit page configurations, and aggregate user clickpaths.

• Telemetry and Device Information: Operating system parameters and localized language preferences.

4. Enterprise Utilization of Personal Data

We deploy personal and corporate data strictly for the following operational workflows:

• System Administration: Provisioning, maintaining, monitoring, and debugging the website infrastructure.

• Procurement Fulfillment: Generating formal commercial quotes, processing B2B transactions, managing delivery timelines, and verifying billing details.

• Security & Threat Mitigation: Monitoring platform access to proactively detect, trace, and block fraudulent transactions, unauthorized network intrusion, or malicious cyber activity.

• Corporate Communications: Executing customer service responses, sending critical security or system updates, and conducting authorized business outreach.

5. Data Retention Architecture

Personal data processed by Hades Bollards is retained only for the minimum duration required to fulfill the operational or regulatory purposes outlined in this policy.

• System Log Files: Retained for an automated rolling cycle of 90 days before permanent erasure, unless flag-checked for security investigations.

• Transactional & Accounting Data: Maintained for a mandatory statutory period of up to 6 years following the end of the financial year, in alignment with UK corporate tax regulations.

• Marketing Data: Retained until explicit withdrawal of consent or a consecutive 24-month period of total account inactivity.

6. Cookies, Tracking, and Consent Defences

Our platform utilizes first-party and third-party cookies to manage system sessions, preserve user interface preferences, and analyze aggregate traffic flow.

• Exemptions (First-Party Analytics & Functionality): In accordance with the Data (Use and Access) Act 2025, consent is not required for strictly necessary functionality cookies or localized website performance analytics. Complete transparency and opt-out pathways are maintained for these processes.

• Marketing & Tracking Blocks: Third-party tracking, cross-site profiling, and advertising cookies are universally blocked by default. They will not execute until you take explicit affirmative action via our cookie management interface. You may review and modify your tracking consent status at any time through your browser settings or our platform’s cookie portal.

7. Global Data Protection and Subject Rights

7.1 UK and EU Data Subject Rights (GDPR)

Every user interacting with our domain from the United Kingdom or the European Union possesses the following statutory data rights:

• Right of Access (DSAR): The right to request comprehensive copies of your personal data held within our enterprise systems.

• Right to Rectification: The right to demand immediate correction of any inaccurate or incomplete personal records.

• Right to Erasure (“Right to be Forgotten”): The right to compel the deletion of personal data from our active environments, subject to regulatory retention exemptions.

• Right to Restrict or Object to Processing: The right to limit the scope of or object to specific processing workflows based on legitimate interests.

• Right to Data Portability: The right to request the structured transfer of your personal data directly to another enterprise or organization.

7.2 California Consumer Privacy Rights (CCPA)

California residents visiting this domain are guaranteed the following protections:

• Right to Know & Disclose: The right to request disclosure of the specific categories and pieces of personal data collected over the preceding 12 months.

• Right to Delete: The right to request the deletion of personal data collected from the consumer, subject to strict legal overrides.

• Right to Opt-Out of Sale or Sharing: Hades Bollards does not sell, lease, or commercially share personal consumer data with third parties for monetary gain or cross-context behavioral advertising.

8. Statutory Complaints and Regulatory Escalation

In strict compliance with section 103 of the UK Data (Use and Access) Act 2025, Hades Bollards maintains a formalized data protection complaints pathway.

If you believe your data privacy rights have been compromised:

1. Submit a formal privacy complaint directly to privacy@hadesbollards.co.uk.

2. The Company will issue a formal statutory acknowledgment within 30 days of receipt.

3. We will investigate, resolve, or provide a detailed status update regarding the matter within 3 calendar months.

If our corporate internal resolution fails to address your concern, you maintain the statutory right to escalate the matter to the appropriate national supervisory authority:

• United Kingdom: The Information Commissioner’s Office (ICO) — https://ico.org.uk/

• European Union: Your respective national Data Protection Authority (DPA) based on geographic residency.

9. Protection of Minors

Hades Bollards manufactures and provisions heavy commercial physical security installations. Our digital platforms are directed exclusively toward procurement professionals and corporate entities. We do not knowingly target, solicit, or collect Personal Identifiable Information from children under the age of 16. If notification is received that data relating to a minor has been recorded in error, it will be extracted and purged from our active files immediately.

This completes the structured Terms of Use, Legal Disclaimer, and Privacy Policy corporate documentation package for hadesbollards.co.uk. All documents are ready for deployment on your official legal pages.

We’re here to help. Leave us a message and one of the team will be in touch!