Privacy notice.

We say what we do. We do what we say.

Hampton Dell aims to keep any personal data you provide safe and secure. This privacy notice sets out the personal data we collect and the reasons why, how we process that personal data, and any rights afforded to you in data protection law or otherwise.

For enquiries, concerns, or complaints, email us at hello@hamptondell.co.uk.

Processing as a Data Processor

When Hampton Dell is engaged by a client, it’s usual for us to process personal data in the role of a Data Processor. Any enquiries, concerns, or complaints should be directed to the relevant Data Controller as we are unable to respond directly to these.

Processing as a Data Controller

As a Data Controller, we process your personal data for various purposes outlined in the table below:

Customer relationships

Purpose Categories of personal data Lawful basis
General enquiries Name, organisation, role, contact details, correspondence. If a sole trader or small partner, all enquiry-related data. Legitimate interest (Art.6(1)(f))
Client relationships Name, organisation, role, contact details, correspondence,account credentials.
If a sole trader or small partner, financial and transaction data.
Legitimate interest (Art.6(1)(f))
Performance of contract (Art.6(1)(b))
Marketing Name, organisation, role, contact details, evidence of per-channel consent or opt-outs Legitimate interest (Art.6(1)(f))
Consent (Art.6(1)(a))
Complaints Name, contact details, complaint details Legitimate interest (Art.6(1)(f))
Legal obligation (Art.6(1)(c))

Providing our services

Purpose Categories of personal data Lawful basis
Supplier relationships Name, organisation, role, contact details, correspondence. If a sole trader or small partner, financial and transaction data. Legitimate interest (Art.6(1)(f))
Performance of contract (Art.6(1)(b))
Organisational security Access credentials and logs, identifiers (e.g., IP addresses, user IDs), activity records Legitimate interest (Art.6(1)(f))

Employment

Purpose Categories of personal data Lawful basis
Recruitment Name, contact details, career history/CV and prospective employment data Intention to contract (Art.6(1)(b))
Employment Name, contact details, employment records Performance of employment contract (Art.6(1)(b))
Legal obligation (Art.6(1)(c))
Legitimate interest (Art.6(1)(f))

Retention

Retention periods for personal data are based on our lawful basis for processing and any relevant/indicative statutory obligations:

Purpose Maximum retention period
General enquiries 7 years
Limitation Act 1980
Client relationships 7 years from termination of contract
Limitation Act 1980
Companies Act 2006
Marketing 3 years
Right of erasure/consent withdrawal exists
Complaints 7 years
Limitation Act 1980
Supplier relationships 7 years from termination of contract
Limitation Act 1980
Organisational security up to 7 years
Limitation Act 1980
Recruitment 7 months
Equality Act 2010
Employment 7 years following termination of employment
Limitation Act 1980
Taxes Management Act 1970
Pensions Act 2014

Consent may be freely withdrawn at any time. Where processing is based on a legitimate interest, you may have a right to object.

Special category & criminal offence data

We do not routinely process these categories of personal data. Additional privacy information will be provided at the time of collection explaining our purposes and the lawful basis for processing.

Processing locations

Hampton Dell processes personal data in the UK by default.

Sub-processors

We minimise the number of sub-processors we use to provide our services. Our sub-processors are contracted with agreements that comply with UK-GDPR Article 28.

Sub-processor Purpose
Portfast Ltd Email transport and hosting

Sharing personal data

Where we have an obligation to share personal data with third parties, and our professional advisors such as accountants or legal counsel, we ensure appropriate protections are in place prior to sharing.

Security

Hampton Dell takes reasonable steps to secure our systems and data, including by:

  • using supported versions of operating systems and applications
  • automating security patching where possible
  • enabling firewalls to prevent unauthorised inbound connections and isolation between network segments/zones
  • enabling anti-virus, anti-spyware and network-level security measures
  • storing client data within per-client encrypted volumes

We actively aim to minimise the volume of personal data stored, and relevant client personal data is returned upon request and securely wiped at the conclusion of each engagement.

Information rights

You have the following (in cases, limited) rights under UK-GDPR and/or other applicable data protection law.

Right Description
Awareness Right to be informed about why and how we process your data (this notice, and any others we may provide, fulfils this requirement)
Access Right to a copy of the data we hold about you
Rectification Right to correct inaccurate or incomplete data
Erasure Right to delete your data, except where retained for contractual compliance
Restriction Right to restrict processing while accuracy is being verified or during legal proceedings
Object Right to object to processing based on legitimate interests (e.g., direct marketing)
Data portability Request a copy of your data in digital format for transfer to another provider (only applies if processed under contract or consent)
Automated decisions and profiling No automated decisions affecting you currently; exceptions apply only if required by contract or with your consent
Complain Right to raise a formal complaint about our data processing

Hampton Dell reserves the right to refuse or charge a reasonable fee for frequent or unfounded rights requests.

Data Protection Officer

Hampton Dell does not meet the criteria to require a Data Protection Officer. Nevertheless, you may email our responsible person at hello@hamptondell.co.uk. You have the right to escalate your complaint to the Information Commissioner’s Office.

Links to content and resources on other websites are provided as a convenience, and Hampton Dell is not responsible for those sites’ data protection compliance or any cookies/tracking technologies they may employ.

Last update: 1st September 2026

essential