Hampton Dell aims to keep any personal data you provide safe and secure. This privacy notice sets out the personal data we collect and the reasons why, how we process that personal data, and any rights afforded to you in data protection law or otherwise.
For enquiries, concerns, or complaints, email us at hello@hamptondell.co.uk.
Processing as a Data Processor
When Hampton Dell is engaged by a client, it’s usual for us to process personal data in the role of a Data Processor. Any enquiries, concerns, or complaints should be directed to the relevant Data Controller as we are unable to respond directly to these.
Processing as a Data Controller
As a Data Controller, we process your personal data for various purposes outlined in the table below:
Customer relationships
| Purpose | Categories of personal data | Lawful basis |
|---|---|---|
| General enquiries | Name, organisation, role, contact details, correspondence. If a sole trader or small partner, all enquiry-related data. | Legitimate interest (Art.6(1)(f)) |
| Client relationships | Name, organisation, role, contact details, correspondence,account credentials. If a sole trader or small partner, financial and transaction data. |
Legitimate interest (Art.6(1)(f)) Performance of contract (Art.6(1)(b)) |
| Marketing | Name, organisation, role, contact details, evidence of per-channel consent or opt-outs | Legitimate interest (Art.6(1)(f)) Consent (Art.6(1)(a)) |
| Complaints | Name, contact details, complaint details | Legitimate interest (Art.6(1)(f)) Legal obligation (Art.6(1)(c)) |
Providing our services
| Purpose | Categories of personal data | Lawful basis |
|---|---|---|
| Supplier relationships | Name, organisation, role, contact details, correspondence. If a sole trader or small partner, financial and transaction data. | Legitimate interest (Art.6(1)(f)) Performance of contract (Art.6(1)(b)) |
| Organisational security | Access credentials and logs, identifiers (e.g., IP addresses, user IDs), activity records | Legitimate interest (Art.6(1)(f)) |
Employment
| Purpose | Categories of personal data | Lawful basis |
|---|---|---|
| Recruitment | Name, contact details, career history/CV and prospective employment data | Intention to contract (Art.6(1)(b)) |
| Employment | Name, contact details, employment records | Performance of employment contract (Art.6(1)(b)) Legal obligation (Art.6(1)(c)) Legitimate interest (Art.6(1)(f)) |
Retention
Retention periods for personal data are based on our lawful basis for processing and any relevant/indicative statutory obligations:
| Purpose | Maximum retention period |
|---|---|
| General enquiries | 7 years Limitation Act 1980 |
| Client relationships | 7 years from termination of contract Limitation Act 1980 Companies Act 2006 |
| Marketing | 3 years Right of erasure/consent withdrawal exists |
| Complaints | 7 years Limitation Act 1980 |
| Supplier relationships | 7 years from termination of contract Limitation Act 1980 |
| Organisational security | up to 7 years Limitation Act 1980 |
| Recruitment | 7 months Equality Act 2010 |
| Employment | 7 years following termination of employment Limitation Act 1980 Taxes Management Act 1970 Pensions Act 2014 |
Consent may be freely withdrawn at any time. Where processing is based on a legitimate interest, you may have a right to object.
Special category & criminal offence data
We do not routinely process these categories of personal data. In the event that we must process special category data (such as health information), we will do so only with a suitable lawful basis.
Sub-processors
We minimise the number of sub-processors we use to provide our services. Our sub-processors are contracted with agreements that comply with UK-GDPR Article 28.
| Sub-processor | Purpose | Location |
|---|---|---|
| Portfast Ltd | Email transport and hosting | UK |
International transfers
Hampton Dell processes personal data in the UK by default. Should we need to use a service provider outside the UK we will ensure appropriate safeguards are in place, such as an adequacy determination, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses.
Sharing personal data
Where we must share personal data with third parties such as our accountants or legal counsel, we ensure appropriate technical and organisational measures are in place prior to sharing.
Security
Hampton Dell takes reasonable steps to secure our systems and data, including by:
- using supported versions of operating systems and applications
- automating security patching where possible
- enabling firewalls to prevent unauthorised inbound connections and isolation between network segments/zones
- enabling anti-virus, anti-spyware and network-level security measures
- storing client data within per-client encrypted volumes
We aim to actively minimise the volume of personal data stored in our role as Data Controller.
Information rights
You have the following (in cases, limited) rights under UK-GDPR and/or other applicable data protection law.
| Right | Description |
|---|---|
| Transparency | Right to be informed transparently about why and how we process your data (this notice, and any others we may provide, fulfils this requirement) |
| Access | Right to a copy of the data we hold about you |
| Rectification | Right to correct inaccurate or incomplete data |
| Erasure | Right to delete your data, except where retained for contractual compliance |
| Restriction | Right to restrict processing while accuracy is being verified or during legal proceedings |
| Object | Right to object to processing based on legitimate interests (such as direct marketing) |
| Data portability | Right to request a copy of data you have supplied to us in a format for transfer to another provider |
| Automated decisions and profiling | Right to challenge automated processing or profiling where it results in significant legal effects |
| Complain | Right to raise a formal complaint about our data processing |
Hampton Dell reserves the right to refuse or charge a reasonable fee for frequent or unfounded rights requests.
Data Protection Officer
Hampton Dell does not meet the criteria to require a Data Protection Officer. Nevertheless, you may email our responsible person at hello@hamptondell.co.uk. You have the right to escalate your complaint to the Information Commissioner’s Office.
Third-party links and content
Links to content and resources on other websites are provided as a convenience, and Hampton Dell is not responsible for those sites’ data protection compliance or any cookies/tracking technologies they may employ.
Last update: 1st September 2026
