1. Who we are

Hatch Creations Limited (company number 04028354), trading as Hatch, is a London-based creative agency. For the personal data described in this policy, Hatch Creations Limited is the data controller.

Registered office and studio: Meridian House, 365 Westhorne Avenue, Greenwich, London, SE12 9AB

Email: studio@hatchcreations.co.uk

Telephone: 020 8297 8001

Website: https://www.hatchcreations.com/

2. What this policy covers

This policy explains how we collect and use personal data when you visit our website, contact us, ask about our services, work with us as a client or supplier, or otherwise communicate with Hatch. Our website and services are intended for business audiences and are not directed at children.

3. Personal data we may collect

• Identity and contact details, such as your name, business name, job title, email address, telephone number and postal address.
• Enquiry and correspondence details, including information you include in a contact form, email, telephone call or other message.
• Client, supplier and project information needed to discuss, quote for, deliver and administer work.
• Contract, transaction and accounting records needed to manage our business and meet legal obligations.
• Technical and usage information, such as pages viewed, approximate location, device and browser information, but only where the relevant technology is permitted and, for non-essential analytics, you have consented.
• Consent and preference records, including the choices saved by our cookie consent tool.
• Security and anti-spam information generated when we protect forms and the website from abuse.

Please do not send special-category or highly sensitive personal data through our contact form unless it is genuinely necessary and agreed with us.

4. How we collect personal data

We collect personal data directly from you when you complete a Webflow contact form, email or telephone us, meet with us, request a quote, become a client or supplier, or otherwise communicate with us. We may also receive business contact information from a colleague, client, supplier or publicly available professional source where this is appropriate and lawful.

Our website uses essential security and consent technologies. Google Analytics 4 is configured to load only after you choose analytics cookies. We do not currently use the website for advertising pixels, newsletter sign-up automation, CRM tracking or session recording.

5. Why we use personal data and our lawful bases

• To respond to enquiries, prepare proposals and take steps you request before a contract — steps before entering a contract and/or our legitimate interests in responding to genuine business enquiries.
• To deliver agreed services and manage client or supplier relationships — performance of a contract and/or our legitimate interests in running our business.
• To manage accounts, invoicing, tax, governance and regulatory obligations — legal obligations and our legitimate interests in proper business administration.
• To protect our website, forms, systems and people from spam, fraud, misuse and security threats — our legitimate interests in keeping our services secure.
• To understand how consenting visitors use our website and improve its content and performance through Google Analytics 4 — your consent.
• To establish, exercise or defend legal claims — our legitimate interests and, where applicable, legal obligations.

Where we rely on legitimate interests, we consider whether the use is necessary and balance it against your rights and reasonable expectations.

‍

Right to object: You can object to processing based on legitimate interests by contacting us.

6. Cookies, analytics and external content

We use Klaro to record cookie choices. Non-essential analytics is blocked until you consent. If you accept analytics, Google Analytics 4 may set first-party cookies and send measurement data to Google. Advertising storage remains disabled in the current setup.

Some pages contain YouTube video content. YouTube content remains blocked until you allow external media. You can review or change your choices at any time through the Cookie settings link in the website footer. See our Cookie Policy at https://www.hatchcreations.com/legal/cookie-policy.

7. Forms and enquiries

Our website is built and hosted using Webflow. When you submit a contact form, Webflow stores the submission in the site’s form-submission area and sends a notification to Hatch by email. Access should be limited to authorised people who need the information to respond to your enquiry.

For enquiries that do not become client work, we retain personal data for 12 months after the last substantive contact, unless we need to keep it for a legal claim or another lawful reason.

If an enquiry becomes a client or supplier relationship, relevant records may be kept for longer to deliver the work, maintain appropriate project and financial records, comply with law and deal with possible claims.

8. Who we share personal data with

• Webflow, which hosts the website and processes website form submissions.
• Google, which supplies hosted font assets when the website loads and, where you consent, provides Google Analytics 4 or YouTube content.
• KIProtect GmbH, whose content-delivery network supplies the open-source Klaro consent-manager script.
• Cloudflare, including Turnstile and related rate-limiting and security services used to protect the website and its forms from spam and abuse.
• Our business email, file-storage and IT providers, to the extent needed to receive, store and manage communications and business records.
• Professional advisers, insurers, contractors and suppliers where they need the information to support our work and are subject to appropriate duties.
• Regulators, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law.

We do not sell personal data. Providers acting as our processors may only use personal data as permitted by our agreements and instructions. Some third-party services, including Google and YouTube when a visitor chooses to use them, may also process information under their own privacy terms.

9. International transfers

Some service providers may process personal data outside the United Kingdom. Where this happens, we use an applicable lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, and take additional measures where required. You can contact us for further information about the safeguards used.

10. How long we keep personal data

• Unconverted enquiries: 12 months after the last substantive contact, unless a longer period is needed for a legal claim or another lawful reason.
• Client, supplier, project and financial records: for as long as necessary to manage the relationship and meet applicable contractual, tax, accounting, insurance and legal requirements.
• Website analytics: according to Hatch’s configured Google Analytics data-retention settings and subject to periodic review.
• Cookie consent choices: normally 180 days in the current Klaro configuration, after which a new choice may be requested.
• Security records: only for as long as reasonably needed to investigate and protect against misuse, subject to provider settings and legal requirements.

We may retain information for longer where required by law, a regulator, litigation hold or an active dispute. Where possible, data that is no longer needed will be deleted or anonymised.

11. Your data protection rights

Depending on the circumstances, you may have the right to ask for access to your personal data; correction of inaccurate data; deletion; restriction; portability; or to object to certain processing. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

To exercise a right, email studio@hatchcreations.co.uk. We may need to verify your identity before responding. You can also complain to the UK Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.

12. Security

We use proportionate organisational and technical measures to protect personal data. No online service is completely secure, so please avoid sending confidential or sensitive information through the general contact form unless necessary and agreed with us.

13. Automated decision-making

We do not use personal data collected through this website to make solely automated decisions that produce legal or similarly significant effects.

14. Changes to this policy

We may update this policy when our services, suppliers, legal obligations or website technologies change. The current version and date will be shown on this page. Material changes to consent-dependent technology may require us to ask for your choices again.

15. Contact us

Hatch Creations Limited

Meridian House, 365 Westhorne Avenue, Greenwich, London, SE12 9AB

studio@hatchcreations.co.uk

020 8297 8001

‍