Privacy Policy

Last updated: April 2026

1. Who We Are

Hunt-Benito Limited ("we", "us", "our") operates the website www.hunt-benito.com. We are a software engineering company registered in Scotland.

For the purposes of data protection law, we are the data controller of the personal information we collect through this website.

2. What Data We Collect

We collect personal data only when you choose to provide it. Specifically:

• Contact form submissions — when you use our contact form, we collect your name, email address, subject, and message content.
• Technical data — our web server automatically logs your IP address, browser type (User-Agent), and the pages you visit. This is standard server operation.

We do not use analytics services (such as Google Analytics), advertising trackers, or social media pixels.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Contact enquiries — to respond to messages you send us. The legal basis is your consent (given when you submit the form).
• Website security — CSRF tokens and bot detection (Cloudflare Turnstile) protect our forms from abuse. The legal basis is our legitimate interest in securing our website.
• Server logs — IP addresses and request metadata are processed for server administration, error diagnosis, and security. The legal basis is our legitimate interest in maintaining a functional and secure website.

4. Third-Party Services

We use the following third-party services that may process your data:

• Cloudflare Turnstile — bot detection on our contact form. Cloudflare may collect your IP address and browser fingerprint data to verify you are human. See Cloudflare's Privacy Policy.
• Google Fonts — we load the Inter typeface from Google's servers. Google may log your IP address and the requested font. See Google's Privacy Policy.

We do not sell, share, or transfer your personal data to any other third parties.

5. Data Retention

• Contact messages — retained for up to 12 months, then permanently deleted. You may request earlier deletion at any time.
• Server logs — rotated and deleted after 30 days.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — you can request a copy of all personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your personal data.
• Right to restrict processing — you can ask us to limit how we use your data.
• Right to data portability — you can request your data in a machine-readable format.
• Right to object — you can object to processing based on legitimate interest.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at admin@hunt-benito.com.

7. Cookies

Our use of cookies is described in detail in our Cookie Policy.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• TLS/HTTPS encryption for all connections
• Strict Content-Security-Policy headers
• Secure cookie flags (Secure, HttpOnly)
• HSTS with preload

9. International Transfers

Our website is hosted in the United Kingdom. Cloudflare and Google Fonts process data in jurisdictions outside the UK. These transfers are covered by adequacy decisions or standard contractual clauses as applicable.

10. Changes to This Policy

We may update this privacy policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Your continued use of the website after changes constitutes acceptance of the revised policy.

11. Contact

If you have questions about this privacy policy or your personal data, please contact us:

• Email: admin@hunt-benito.com
• Or use our contact form