Privacy & Complaints

1. Who we are & contact details
House  of  Hyde  Group (“we”, “us”, “our”) is the data controller under the UK GDPR and Data Protection Act 2018. Our registered office is [insert address].
Data Protection Officer: [Name], [email], [phone].

2. What personal data we collect

• Identity & contact details (name, address, email, phone).
• Transactional and behavioural data (payments, website usage, IP, cookies).
• Special category data (health, ethnicity) only where necessary and with your explicit consent or legal basis.
• Data from third parties (e.g. local authorities, DWP) as legally permitted.

3. How we use your information
We process data for legitimate business purposes, legal compliance, contract performance, and with consent when needed — aligned with UK GDPR principles.

4. Legal bases for processing

• Contract: to fulfill our obligations.
• Legal obligation: e.g., for tax, reporting, anti-fraud.
• Legitimate interest: e.g., improving services, safeguarding, marketing (with option to opt-out).
• Consent: for anything not covered above (e.g., direct marketing, special category data).

5. Cookies & electronic communications (PECR)
We use cookies to improve site functionality. You can manage preferences via our cookie banner. We comply with the Privacy and Electronic Communications Regulations — requiring consent for marketing emails, texts, and cookies.

6. Data sharing
We may share data with:

• Service providers under contract, who must comply with GDPR.
• Public bodies (e.g. law enforcement), where required by law.
• Affiliated companies — subject to confidentiality obligations.

7. International transfers
Transfers outside the UK/EEA are secured via appropriate safeguards (e.g., ICO-approved Standard Contractual Clauses).

8. Data retention
We retain personal data only as long as necessary (e.g. contractual period plus statutory retention), then securely dispose of it.

9. Your rights
Under UK GDPR, you have rights to:

• Access, correct, or delete your data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.
• Lodge a complaint with the ICO (https://ico.org.uk).

10. Changes to this policy
We’ll update this page when the policy changes. Significant changes will be communicated via email or website notice.