Northern HV - Logo

Privacy Policy

Introduction

Northern HV Ltd ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website (www.northernhv.co.uk) or interact with our services.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Data Controller

The data controller responsible for your personal data is:

Northern HV Ltd Unit 1 & Unit 3, 3 Enterprise Court Hartlepool, County Durham, TS25 2FE United Kingdom

For data protection enquiries, please contact us via our Contact Us page.

What Personal Data We Collect

Information You Provide Directly

  • Name, email address, phone number, and company name (via contact forms and callback request forms)
  • Any additional information you include in form messages

Information Collected Automatically

  • IP address (anonymised where possible)
  • Browser type and version, device type, operating system
  • Pages visited, time spent on pages, referring website
  • Cookie preferences and consent records

Information From Third-Party Sources

  • Google Places reviews (publicly available business reviews)

How We Use Your Data

We use your personal data for the following purposes:

  • Responding to enquiries submitted via contact forms (Lawful basis: Legitimate interest / Consent)
  • Processing callback requests (Lawful basis: Legitimate interest / Consent)
  • Providing quotes and information about our services (Lawful basis: Pre-contractual measures)
  • Sending emails related to your enquiry (Lawful basis: Legitimate interest)
  • Website analytics to understand visitor behaviour and improve our site (Lawful basis: Consent via cookie banner)
  • Protecting our website against spam and abuse via reCAPTCHA (Lawful basis: Legitimate interest)
  • Complying with legal obligations (Lawful basis: Legal obligation)

We will never sell your personal data to third parties.

Cookies

Our website uses cookies to function properly and to analyse how visitors use the site. When you first visit, you will see a cookie consent banner where you can choose which types of cookies to allow.

Necessary Cookies Required for the website to function. These cannot be disabled. They include session management and security cookies.

Analytics Cookies Help us understand how visitors use our website by collecting anonymous usage data. We use Google Analytics 4 and Google Tag Manager. These cookies are only loaded after you give consent.

Marketing Cookies Used to track visitors across websites for advertising purposes. These are only loaded after you give consent.

Functional Cookies Enable enhanced features such as embedded videos (YouTube, Vimeo) and personalised content. These are only loaded after you give consent.

You can change your cookie preferences at any time by clicking the cookie settings button on our website. Analytics cookies are only loaded after you provide explicit consent. No tracking scripts run until you accept analytics cookies via the cookie banner.

Third-Party Services

We use the following third-party services that may process your data:

Vercel - Website hosting and delivery. Processes IP address and request logs. Privacy policy: vercel.com/legal/privacy-policy

Amazon CloudFront (AWS) — Content delivery network for media files. Processes IP address and request logs. Privacy policy: aws.amazon.com/privacy

Google Analytics 4 — Website analytics (with consent only). Processes anonymised IP and browsing behaviour. Privacy policy: policies.google.com/privacy

Google Tag Manager — Tag management (with consent only). Processes browsing behaviour. Privacy policy: policies.google.com/privacy

Google reCAPTCHA — Spam and bot protection on forms. Processes IP address and browser behaviour. Privacy policy: policies.google.com/privacy

Google Maps — Interactive maps. Processes IP address. Privacy policy: policies.google.com/privacy

Google Places — Display of business reviews. Processes publicly available review data. Privacy policy: policies.google.com/privacy

Embedded content (YouTube, Vimeo, Facebook, Instagram, Spotify) may set their own cookies when loaded. These are only loaded with your consent via functional cookies.

Website Development and Management

This website is developed and managed by Web & Roll (www.webandroll.co.uk) on behalf of Northern HV Ltd. Web & Roll may access personal data solely for the purposes of website maintenance, security, and technical support. They do not use your data for any other purpose.

International Data Transfers

Some of our third-party service providers (Vercel, AWS, Google) process data outside the United Kingdom. Where data is transferred internationally, it is protected by:

  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
  • The service provider's participation in recognised data protection frameworks
  • The UK's adequacy decisions for relevant countries

Data Retention

We retain personal data only for as long as necessary:

  • Contact form submissions — 2 years from submission
  • Callback requests — 2 years from submission
  • Cookie consent records — 12 months (then consent is re-requested)
  • Analytics data — As per Google Analytics retention settings (default 14 months)
  • Server/access logs — 30 days (managed by Vercel)

Your Rights

Under UK GDPR, you have the following rights:

  • Right of access — Request a copy of the personal data we hold about you
  • Right to rectification — Request correction of inaccurate or incomplete data
  • Right to erasure — Request deletion of your personal data (where there is no compelling reason to continue processing)
  • Right to restrict processing — Request that we limit how we use your data
  • Right to data portability — Request your data in a structured, machine-readable format
  • Right to object — Object to processing based on legitimate interests
  • Right to withdraw consent — Withdraw consent at any time (e.g. via the cookie settings button or by contacting us)

To exercise any of these rights, please contact us via our Contact Us page. We will respond within one month of receiving your request.

Data Security

We take the security of your personal data seriously. Northern HV holds the following certifications:

  • ISO 9001 - Quality Management
  • ISO 14001 - Environmental Management Systems
  • ISO 27001 - Information Security Management, ensuring systematic protection of data
  • ISO 45001 - Occupational Health & Safety
  • SSIP
  • NERS

Technical measures include encrypted connections (HTTPS/TLS), access controls, and regular security reviews.

Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "last reviewed" date. We encourage you to review this policy periodically.

Last reviewed: March 2026

Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Website: ico.org.uk

Helpline: 0303 123 1113