Privacy Policy

Hedley Planning

Last Updated: 18th February 2026

1. Who We Are

Hedley Planning (“we”, “us”, “our”) is committed to protecting and respecting your privacy in accordance with the UK GDPR and EU General Data Protection Regulation (GDPR) and applicable data protection laws.

Data Controller:
Hedley Planning
Unit 3, Enterprise Hub, Burn Ln, Hexham NE46 3HN
Email: enquiries@hedleyplanning.co.uk
Telephone: 07725 834338

If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above.

2. What Personal Data We Collect

We may collect and process the following personal data:

A. Information You Provide Via Our Contact Form

  • Name
  • Email address
  • Telephone number (if provided)
  • Company name (if provided)
  • Any information you include in your message

B. Technical Data (Automatically Collected)

  • IP address
  • Browser type and version
  • Time zone setting
  • Operating system and platform
  • Website usage data (via cookies, if applicable)

3. How We Use Your Personal Data

We process personal data for the following purposes:

  • To respond to enquiries submitted via our contact form Legitimate interests (responding to enquiries)
  • To provide requested services or information Performance of a contract or steps prior to contract
  • To manage and protect our website Legitimate interests
  • To comply with legal obligations Legal obligation

We do not sell your personal data.

4. Lawful Basis for Processing (GDPR Compliance)

Under GDPR, we rely on:

  • Legitimate Interests – To respond to enquiries and operate our business effectively
  • Contractual Necessity – Where processing is necessary to provide services
  • Legal Obligation – Where required by law
  • Consent – Where required (e.g., optional cookies or marketing communications)

Where we rely on consent, you may withdraw it at any time.

5. Data Sharing

We may share your personal data with:

  • Website hosting providers
  • IT and email service providers
  • Professional advisers (legal, accounting)
  • Regulatory or legal authorities (if required)

All third-party service providers are required to respect the security of your personal data and treat it in accordance with the law.

If data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

6. Data Retention

We retain personal data only for as long as necessary:

  • Enquiry data: Typically up to 12–24 months after last contact
  • Client data: For the duration of the contract and up to 6 years thereafter (for legal and tax purposes)
  • Technical data: In accordance with our cookie and analytics settings

We regularly review retention periods.

7. Your Data Protection Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent (where applicable)
  • Lodge a complaint with a supervisory authority

If you are in the UK, you may contact the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

We may need to verify your identity before processing your request.

8. Data Security

We have implemented appropriate technical and organisational measures to protect personal data, including:

  • Secure hosting environments
  • SSL encryption on our website
  • Restricted access to personal data
  • Regular security updates

However, no internet transmission is completely secure.

9. Cookies and Analytics

Our website uses cookies to distinguish you from other users of our website and to improve user experience.

We use Google Analytics, a web analytics service provided by Google LLC.

Google Analytics uses cookies to collect information such as:

  • IP address (anonymised where possible)
  • Pages visited
  • Time spent on pages
  • Device and browser type
  • General geographic location (country/city level)

This information helps us understand how visitors use our website and improve our services.

IP Anonymisation

We have configured Google Analytics to anonymise IP addresses where possible.

Lawful Basis

We rely on consent to process analytics cookies. Google Analytics will only be activated if you accept analytics cookies via our cookie banner.

You can withdraw your consent at any time via our cookie settings tool.

10. International Data Transfers

Google Analytics may transfer data to servers located outside the UK and/or EEA, including the United States.

Where such transfers occur, appropriate safeguards are used, including:

  • Standard Contractual Clauses (SCCs)
  • UK International Data Transfer Agreement (where applicable)

For more information, please see Google’s Privacy Policy:
https://policies.google.com/privacy

11. Managing Cookies

You can:

Disabling cookies may affect website functionality.