Privacy Policy

01Overview

The following sections are illustrative sample wording only. References to “we”, “us” and “our” describe a hypothetical privacy notice for Hickman Enterprises and must be adapted to the business’s actual practices.

This notice would apply to personal information collected through https://hickman.enterprises, enquiries and related business interactions. Personal information means information that identifies you, or could reasonably be linked to you. The entity responsible for this information is Hickman Enterprises, located at {{Registered address}}.

Separate agreements or notices may apply when we process information on behalf of a client, recruit employees or provide a specific service. This website notice would not replace those documents. Third-party websites linked from our site have their own privacy notices.

02Information we collect

Depending on how you interact with us, we may collect information you provide directly, information generated when you use our website, and information from authorised business sources. The categories below are examples to confirm before publication.

• Information you provide. Your name, business email address, telephone number, company, role and the content of an enquiry, including details submitted through a contact or audit-request form.
• Website and device information. IP address, browser and operating system, referring pages, pages viewed and approximate location derived from an IP address, where the website’s tools collect this information.
• Business relationship information. Correspondence, meeting notes and service preferences associated with a business enquiry or engagement.
• Information from other sources. Professional contact information from referrals or publicly available business sources, where permitted. Identify the actual sources in the published notice.

Please do not send sensitive personal information in a general enquiry unless it is specifically requested through an appropriate channel. State which fields are required and what happens if you choose not to provide them.

03How we use information

We may use personal information for the purposes described below. The published notice should connect each purpose to the information involved and, where required, identify its legal basis.

• Respond to enquiries. Communicate with you about requests, arrange discussions and provide information about services you have asked about.
• Manage business relationships. Administer engagements, maintain relevant records and deliver agreed services.
• Operate and improve the website. Understand website performance, troubleshoot issues and maintain the security of our systems.
• Send relevant communications. Provide business updates where permitted and honour your communication preferences or consent choices.
• Meet legal obligations. Maintain necessary records, address lawful requests and establish or defend legal claims.

Where applicable, processing may rely on consent, a contract, legal obligations or legitimate interests. Specify the actual basis and interests for each purpose; do not assume that every basis applies. Any automated decision-making or profiling should be disclosed if used.

04How we share information

We may share relevant information with service providers that support website hosting, business communications, analytics or other operational functions. Identify the actual categories of recipients and explain the contractual or other protections used for each relationship.

Information may also be disclosed to professional advisers, authorities where legally required, or parties involved in a proposed business transaction, subject to applicable requirements. Disclosures to affiliated enterprises should be listed only if they occur, with the purpose of each disclosure clearly explained.

Before publishing, confirm whether any activity is considered a “sale”, “sharing” or targeted advertising under applicable privacy laws. Add accurate disclosures and opt-out options where needed rather than assuming that these activities do not occur.

05Cookies and similar technologies

Cookies are small files stored on your device. Our website may use cookies or similar technologies to support essential functions, remember preferences and understand how visitors use the site. Optional analytics or advertising technologies should be described only if they are actually deployed.

The final notice should identify the technologies used, their providers, purposes and lifetimes in {{Cookie notice or inventory link}}. Where consent is required, optional technologies should be controlled by a suitable consent mechanism before they are activated.

You may be able to manage optional cookies through {{Cookie preferences link}} and your browser settings. Blocking some cookies can affect website functionality. Explain any applicable browser-based opt-out signals and how the website responds to them.

06Retention and security

We would retain personal information only for as long as needed for the purpose for which it was collected, including relevant legal, accounting or reporting requirements. Retention periods should reflect the type of record, the relationship involved and any ongoing dispute or legal hold.

Replace this sample with documented periods or criteria for enquiries, client records, analytics and backups: {{Retention schedule or criteria}}. Explain how information is deleted or anonymised when it is no longer needed, including any limits related to backup systems.

Appropriate technical and organisational measures may include access restrictions, staff training and safeguards for data in transit or storage. Describe only measures that have been verified. No method of transmission or storage is completely secure, and this notice should not promise absolute security.

07Your rights and choices

Depending on your location and the laws that apply, you may have rights concerning your personal information. These rights are not universal and may be subject to exceptions. The published notice should state which rights apply to the audiences it serves.

• Access and correction. Request access to your personal information or ask for inaccurate or incomplete information to be corrected.
• Deletion and restriction. Ask for information to be deleted or for certain processing to be restricted, where applicable.
• Objection and portability. Object to certain processing or request a portable copy of eligible information.
• Consent and communications. Withdraw consent for future processing where consent is the basis, or unsubscribe from marketing using the instructions in a message.

To make a request, use the placeholder contact route in section 11. We may need proportionate information to verify your identity. Confirm applicable response times, authorised-agent procedures, appeal routes and any right to complain to {{Relevant supervisory authority}} before publishing.

08International transfers

Personal information may be processed in countries other than the country in which you live if our verified operations or service providers require it. Those countries may have different privacy laws. Identify the actual locations and transfer arrangements in the final notice.

Where applicable, explain the safeguards used for these transfers, such as an adequacy decision or approved contractual terms, and how a person can request further information or a copy. Do not describe a transfer mechanism as being in place unless it has been confirmed.

09Children’s privacy

This sample assumes the website is intended for business audiences and is not directed to children under {{Applicable age threshold}}. Confirm the audience and threshold before using this wording.

If you believe a child has provided personal information through the website, contact [email protected]. The final notice should explain the verified process for reviewing such reports and deleting information where appropriate. Services intended for children need a separate assessment and suitable disclosures.

10Updates to this policy

We may update this notice to reflect changes to our practices or applicable requirements. The “Last updated” date at the top of the page would identify the latest version, and the effective date would indicate when the revised notice applies.

For significant changes, describe the actual notification method, such as a website notice or direct communication where required. Obtain any additional consent that is necessary. Replace the placeholder dates and confirm the update process before publication.

11Contact us

For privacy questions or to exercise an applicable right, the published notice should provide a monitored contact channel for the responsible legal entity. All details below are placeholders; they are not live contact information.

Include a data protection officer, local representative or additional regional contact only where applicable and verified. Avoid sending sensitive information until a suitable request channel has been confirmed.