Policy

Privacy policy

How Hummingbird collects, uses, stores, and protects personal information.

Last updated: 10 February 2026

This policy explains how Hummingbird handles personal data when you use this website, submit an enquiry, or subscribe to updates.

Who we are

Hummingbird is the data controller for personal data collected through this website. For any privacy queries, please use the contact form.

What data we collect

  • Contact form data: first name, last name, email, job title, phone (optional), reason for contact, message, and referral source.
  • Newsletter form data: name and email address.
  • Technical data: limited server and security data needed to run and protect the site.

How we use your data

  • To respond to enquiries and discuss relevant services.
  • To send newsletter emails where you have opted in.
  • To maintain site security, prevent abuse, and troubleshoot issues.
  • To meet legal and regulatory obligations where required.

Lawful bases we rely on (UK GDPR)

  • Enquiries: legitimate interests and/or steps prior to entering a contract.
  • Newsletter: consent (you can withdraw at any time).
  • Security and operations: legitimate interests.
  • Legal compliance: legal obligation where applicable.

Who we share data with

We only share data with service providers needed to operate this website and process enquiries or newsletter signups.

  • Website hosting and infrastructure provider(s).
  • Email and form-processing provider: Brevo (used to process newsletter subscriptions and route contact form notifications).

We do not sell personal data.

International transfers

Some service providers may process data outside the UK. Where this happens, we use appropriate safeguards required under UK data protection law.

How long we keep personal data

  • Contact enquiries: up to 18 months after the latest relevant contact.
  • Newsletter data: until you unsubscribe or ask us to delete your data.
  • Security and technical logs: retained for a limited period as operationally required.

Your rights

Under UK GDPR, you can ask us to:

  • Provide access to your personal data.
  • Correct inaccurate personal data.
  • Delete personal data in certain circumstances.
  • Restrict or object to processing in certain circumstances.
  • Withdraw consent at any time where consent is the lawful basis.

To exercise your rights, use the contact form.

Complaints

If you are not satisfied with how we handle your personal data, you can complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.

Cookies

For details on cookie use, see our cookie policy.

Updates to this policy

We may update this policy from time to time. The “last updated” date at the top of this page shows the latest version.