Privacy policy

Who we are

This website is run by The Sandpiper Group Ltd, trading as HarbourPoint Solutions, a private limited company registered in England and Wales under company number 14184250. Registered office: Unit 11 Forest Gate, Chippenham, Wiltshire, SN15 3RS. You can contact us at matt@harbourpoint.online or on 01234 370 143.

We are the data controller for the personal data described in this policy.

What we collect

• Enquiry details you send through our contact, audit and local enquiry forms, such as your name, email, phone number, business name, website, budget and message.
• Chat conversations with Rosie, our website assistant, including anything you choose to type, such as contact details.
• Deal or project information you enter into our planning tools.
• How you found us, such as the page you arrived on, the referring website and campaign tags in the link you clicked. This is kept in your browser for the visit and attached to any enquiry you send.
• Technical data our hosting provider records automatically, such as IP address, browser type and the pages requested, used to keep the site secure and working.

Why we use it and our lawful basis

• To reply to your enquiry and give you a quote or proposal: steps taken at your request before entering a contract.
• To deliver services you buy from us: performance of a contract.
• To follow up enquiries and chats, understand which pages bring in enquiries and keep the site secure: our legitimate interests in running and growing our business.
• To keep business and tax records: legal obligation.
• To send marketing emails: your consent, or for existing clients our legitimate interest in telling you about similar services. You can opt out at any time.

Who we share it with

We do not sell your data. We share it only with trusted providers who help us run the website and our business, under contracts that require them to protect it:

• Website hosting and database providers, which store enquiries and chats.
• Resend, our email delivery provider, which sends enquiry notifications to us.
• AI model providers that power Rosie and our planning tools, which process the text you type to generate replies.
• Google, where we use its services such as Google Search Console and Google Business Profile.
• Professional advisers, and authorities where the law requires it.

Some of these providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Addendum.

How long we keep it

We keep enquiries and chats for up to two years after our last contact, unless you become a client. Client records are kept for six years after the end of our work together for legal and tax reasons. Rosie's chat history saved in your browser stays there until you clear it.

Your rights

Under UK GDPR you can ask to access, correct or delete your data, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. Email matt@harbourpoint.online and we will reply within one month.

If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Security

Our site uses an encrypted connection and enquiry data is held in access-controlled systems. No online service can be completely secure, so please avoid sending sensitive information through the chat.

Children

Our services are for businesses and are not aimed at children under 16.

Changes

We may update this policy from time to time. The date at the top shows when it last changed.