Who We Are
Horbury & Goffe Ltd provides creative services to universities, research organisations, and knowledge-focused institutions. Our website address is https://discoverhg.com.
What Personal Data We Collect and Why
Information you provide to us:
When you contact us through our website forms, we collect:
Legal basis: Legitimate interests (responding to enquiries and providing services you’ve requested)
How long we keep it: Contact form enquiries are kept for 2 years then deleted. If you become a client, we retain project-related correspondence for the duration of our working relationship plus 2 years for business records.
Website Usage Information:
Google Analytics
We use Google Analytics to understand how visitors use our website – which pages are popular, how long visits last, where visitors come from. This involves collecting:
Legal basis: Legitimate interests (improving our website and understanding our audience)
How long we keep it: Google Analytics data is automatically deleted after 26 months
Cookies: Google Analytics sets cookies to distinguish visitors. You can refuse these cookies through your browser settings or our cookie consent banner.
HubSpot CRM
When you submit a contact form, your information is stored in HubSpot (our customer relationship management system) so we can:
Legal basis: Legitimate interests (managing client relationships and business operations)
Data processing agreement: HubSpot processes data on our behalf under standard contractual clauses
How long we keep it: Contact information is retained while our business relationship is active, plus 2 years after last contact
Hosting and Technical Services
Our website is hosted by SiteGround. Server logs may temporarily record:
Legal basis: Legitimate interests (website security and performance)
Data processing agreement: SiteGround processes data on our behalf under their privacy policy
Cookies We Use
Essential cookies: Required for website functionality (remembering form data, security)
Analytics cookies: Google Analytics tracking (can be declined via cookie banner)
HubSpot tracking cookies: Track form submissions and website interactions (can be declined via cookie banner)
You can control cookies through your browser settings or our cookie consent banner. Disabling cookies may affect website functionality.
Email Communications
If you provide your email address:
We use standard email providers (Gmail/Google Workspace) for business correspondence.
Who We Share Your Data With
We share personal data only with trusted service providers who help us operate our business:
HubSpot (USA): CRM and contact management – HubSpot Privacy Policy
Google (USA): Analytics and email services – Google Privacy Policy
SiteGround (UK/EU): Website hosting – SiteGround Privacy Policy
All service providers process data on our behalf under data processing agreements and appropriate safeguards.
We do not sell, rent, or trade your personal information to third parties.
International Data Transfers
Some of our service providers (HubSpot, Google) are based in the USA. Data transferred to the USA is protected by:
Your Rights
Under UK GDPR, you have the right to:
Access your data: Request a copy of personal data we hold about you
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data (subject to legal retention requirements)
Restrict processing: Ask us to limit how we use your data
Object: Object to processing based on legitimate interests
Data portability: Receive your data in machine-readable format
Withdraw consent: Where we rely on consent, you can withdraw it at any time
To exercise any of these rights, contact us at [email]. We’ll respond within one month.
How to Request Accessible Alternatives
If you need any information from our website in an alternative accessible format (large print, audio, etc.), contact us and we’ll provide it.
Security
We take security seriously and use appropriate technical and organisational measures to protect your data:
However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
Data Retention
Contact form enquiries: 2 years from submission
Client project data: Duration of relationship + 2 years
Analytics data: 26 months (automatic deletion)
Email correspondence: 2 years from last contact
Financial records: 7 years (legal requirement)
Data is securely deleted when retention periods expire.
Children’s Privacy
Our services are not directed at children under 16. We do not knowingly collect data from children. If you believe we’ve inadvertently collected data from a child, contact us immediately.
Changes to This Privacy Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. Significant changes will be noted with a new “Last updated” date at the top of this page.
We encourage you to review this policy periodically.
Questions or Concerns
If you have questions about this privacy policy or how we handle your data please contact us.
Complaints
If you’re not satisfied with how we’ve handled your data, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/make-a-complaint/
Phone: 0303 123 1113