Hielaman

Legal

Privacy Policy

How we handle personal data collected through this website, and the rights you have over it.

Last updated: 25 August 2026

Who we are

Hielaman Ltd is a specialist DSEAR and fire engineering consultancy registered in England and Wales, company number 14871762. Our registered office is 128 City Road, London, EC1V 2NX, United Kingdom. In this policy "we", "us" and "our" mean Hielaman Ltd.

We are the data controller for personal data collected through hielaman.com. That means we decide why and how your personal data is used, and we are responsible for looking after it.

If you have a question about this policy, or you want to exercise any of the rights described below, contact us at admin@hielaman.com.

What we collect and why

We keep this deliberately narrow. We do not sell personal data, we do not share it for advertising, and we do not build marketing profiles.

Enquiries you send us

When you submit the contact form we collect your name, company, phone number and email address, which are required, together with the service you are asking about and your message, which are optional.

WhatWhyLawful basis
Name, company, phone, emailTo identify you and reply to your enquiryLegitimate interests: responding to a request you sent us
Service selected and your messageTo understand what you need before we replyLegitimate interests: responding to a request you sent us

The form sends this information straight to our inbox as an email. It is not stored in a database on this website, and it is not added to a mailing list. We will only use it to respond to you and to carry out any work that follows.

Website analytics

We use Google Analytics 4 to understand how many people visit the site, which pages they read and roughly where in the world they are. This tells us whether the site is doing its job. It sets cookies in your browser and collects your IP address, device and browser type, the pages you view and how you arrived at the site.

We also record when a contact form is submitted, as an event count only. That event does not carry your name, email or message into Google Analytics.

Analytics cookies are not necessary for the site to work. We rely on your consent for them, and you can withdraw that consent at any time using the controls described under Cookies below.

Server and security logs

Our hosting provider automatically records technical information about requests to the site, including IP address, browser type and the page requested. These logs exist to keep the site running and to protect it from abuse. We rely on our legitimate interest in operating a secure website, and the logs are held for a short period before being deleted.

Who we share data with

We use a small number of established suppliers to run the site and our email. They process data on our instructions under contract, and they are not permitted to use it for their own purposes.

SupplierWhat they doWhere
VercelHosts the website and serves its pagesUnited States and EU
ResendDelivers contact form submissions to our inboxUnited States
Google WorkspaceHosts the mailbox that receives your enquiryEU and United States
Google AnalyticsProvides anonymous visitor statisticsEU and United States

Some of these suppliers process data outside the UK. Where that happens, the transfer is covered by the UK International Data Transfer Addendum or Standard Contractual Clauses, which are the safeguards recognised under UK data protection law.

We may also disclose personal data where we are required to by law, by a regulator, or by a court.

How long we keep it

Enquiries are kept for as long as we are in correspondence with you and for up to two years afterwards, so that we have a record of what was asked and what we advised. Where an enquiry becomes a project, the records are kept for six years after the work ends, in line with our professional, insurance and tax obligations.

Analytics data is retained by Google for the period set on our account, after which it is deleted automatically. Server logs are held for a short period only.

Cookies

A cookie is a small file stored by your browser. The only cookies this site sets are the Google Analytics cookies described above, typically named _ga and _ga_<id>. They distinguish one visitor from another and remember that a visit is part of the same session. They do not identify you by name.

You can block or delete cookies in your browser settings at any time, and you can opt out of Google Analytics across every website using Google's browser opt-out add-on. Blocking these cookies will not stop any part of this site from working.

Your rights

Under UK GDPR you have the right to:

  • ask for a copy of the personal data we hold about you
  • have inaccurate data corrected
  • ask us to delete your data where there is no reason to keep it
  • ask us to restrict how we use it while a concern is resolved
  • object to processing carried out on the basis of legitimate interests
  • ask us to transfer your data to another provider
  • withdraw consent for analytics cookies at any time

Email admin@hielaman.com to exercise any of these. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would rather you came to us first so we have the chance to put it right.

Security

The site is served over HTTPS, so anything you submit through the contact form is encrypted in transit. Access to the mailbox that receives enquiries is restricted to Hielaman staff. No system is perfect, but we take reasonable steps to keep your information safe.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.

Changes to this policy

If we change how we handle personal data we will update this page and change the date at the top. Where a change is significant we will make that clear rather than relying on you to notice.