Privacy Policy

Last updated: 25 September 2026

Haul Dean Limited ("we", "us" or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you deal with us as a customer, supplier, contact or other business contact, and when you use our website.

We only provide our services to customers in the United Kingdom.

1. Who we are

Haul Dean Limited is the data controller responsible for your personal information.

Business name: Haul Dean Limited
Address: Bradgate House, Chapel Lane, Easingwold, York, United Kingdom, YO61 3AE
Email: enquiries@hauldean.co.uk

If you have any questions about how we use your personal information, you can contact us using the details above.

2. What personal information we collect

Depending on how you interact with us, we may collect and use the following types of personal information:

  • Your name
  • Business name and job title, where applicable
  • Billing and business addresses
  • Service or delivery addresses
  • Telephone and mobile numbers
  • Email addresses
  • Information relating to services we provide to you
  • Transaction and invoicing information
  • Payment and account information where necessary
  • Correspondence and communications between you and us
  • Information you provide when making an enquiry, complaint or request
  • Website usage and technical information, where applicable
  • Other information reasonably necessary to provide our services and manage our business relationship

We do not generally collect or process special category personal data such as information about health, ethnicity, religion or political opinions.

3. How we collect your information

We may collect personal information:

  • Directly from you when you contact us or use our services
  • When you provide information by telephone, email or other forms of communication
  • When you place an order or enter into an agreement with us
  • When we invoice you or receive payment from you
  • From your organisation where you are acting as a representative or contact
  • From publicly available business information where appropriate
  • From other organisations where this is necessary to provide our services or manage our business relationship
  • Automatically when you use our website, where applicable and where permitted

Where we receive personal information about you from someone else, we will use it only for appropriate and lawful business purposes.

4. How we use your personal information

We use personal information for purposes including:

  • Providing and delivering our services
  • Managing our relationship with you
  • Processing orders and requests
  • Preparing and issuing invoices
  • Processing and recording payments
  • Communicating with you about our services
  • Responding to enquiries and requests
  • Managing customer accounts and records
  • Dealing with complaints and resolving issues
  • Maintaining business records
  • Understanding how our website is used and improving our website and services
  • Complying with legal and regulatory obligations
  • Protecting our business, systems and customers from fraud or misuse
  • Establishing, exercising or defending legal claims where necessary

We will only use your personal information where we have a lawful basis for doing so.

5. Our lawful bases for using your information

Under UK data protection law, we rely on one or more of the following lawful bases:

Contract

We may process your personal information where it is necessary to enter into or perform a contract with you, including providing our services, managing your account and processing payments.

Legal obligation

We may process your personal information where necessary to comply with legal obligations, including accounting, tax, financial and other regulatory requirements.

Legitimate interests

We may process personal information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

This may include managing customer and supplier relationships, administering our business, maintaining appropriate records, protecting our systems and communicating with business contacts.

Consent

Where required, we will ask for your consent before processing your personal information for a particular purpose.

For example, where applicable, we will obtain consent before placing or using non-essential cookies for analytics purposes.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing carried out before you withdrew your consent.

6. Who we share your information with

We do not sell or rent your personal information.

We may share personal information where necessary with trusted third parties who help us operate our business, including:

  • Accountants and professional advisers
  • Payment service providers and banks
  • IT and software service providers
  • Cloud storage and productivity service providers
  • Email and communication service providers
  • Website hosting, security and infrastructure providers
  • Delivery, logistics or other service providers where necessary to provide our services
  • Government bodies, regulators, law enforcement agencies or other organisations where we are legally required to do so
  • Other professional advisers where necessary to protect our legal rights

Where we use a third-party service provider to process personal information on our behalf, we take reasonable steps to ensure that appropriate contractual and security arrangements are in place.

7. Our use of Google Workspace

We use Google Workspace for business email and other productivity services.

This means that personal information may be processed through Google's systems when, for example, you communicate with us by email or when we store or manage business information.

Google may process information on our behalf as a service provider. Information may also be processed or stored outside the United Kingdom depending on the Google services and configuration we use.

We take reasonable steps to ensure that appropriate data protection safeguards are in place when using these services.

8. Our use of Microsoft OneDrive

We use Microsoft OneDrive for business file storage and document management.

Personal information may therefore be stored within documents or files held in our OneDrive environment.

Microsoft may process information on our behalf as a service provider. Information may also be processed or stored outside the United Kingdom depending on the services and configuration we use.

We take reasonable steps to ensure that appropriate data protection safeguards are in place when using these services.

9. Cookies

Our website uses cookies and similar technologies.

Cookies are small text files placed on your device when you visit a website. They can be used for a variety of purposes, including enabling websites to function correctly, protecting the website from malicious activity and understanding how visitors use it.

Essential cookies

Some cookies may be necessary for the website to operate correctly, maintain security or provide a service you have requested.

These may include cookies used by our website infrastructure and security services. Where a cookie is strictly necessary for the operation or security of the website, it does not require consent where permitted under applicable law.

Cloudflare

We use Cloudflare to provide website infrastructure, DNS, security and firewall services.

Cloudflare may use cookies and similar technologies to help protect our website from malicious or automated traffic, identify legitimate visitors and maintain the security and reliability of our website.

Depending on the Cloudflare services enabled on our website, Cloudflare may set cookies such as security-related cookies on your device.

These cookies are generally used for security and functionality rather than advertising or marketing purposes. Where a Cloudflare cookie is strictly necessary for the security or operation of our website, it may be used without requiring consent.

Cloudflare may process technical information such as IP addresses, browser information, device information and information relating to requests made to our website as part of providing its security and infrastructure services.

Some information may be processed outside the United Kingdom. Where this occurs, appropriate safeguards will be used in accordance with applicable UK data protection law.

Google Analytics

We use Google Analytics to help us understand how visitors use our website.

Google Analytics may collect information such as:

  • Pages visited
  • How visitors arrived at our website
  • Approximate location
  • Device and browser information
  • How long visitors spend on pages
  • Interactions with the website

This information helps us understand website traffic and improve the website and the services we provide.

Where required by law, Google Analytics cookies will only be used after you have provided your consent through our cookie consent mechanism.

You can withdraw or change your cookie consent at any time through the cookie settings available on our website.

Google may process information outside the United Kingdom in connection with Google Analytics. Where this occurs, appropriate safeguards will be used in accordance with applicable UK data protection law.

For further information about how Google processes information, please refer to Google's privacy information.

10. Keeping your information secure

We take reasonable technical and organisational measures to protect personal information against:

  • Unauthorised access
  • Accidental loss
  • Destruction or damage
  • Unauthorised disclosure
  • Unauthorised alteration or use

These measures may include access controls, account security, passwords, authentication measures, secure cloud services and limiting access to personal information to people who need it for legitimate business purposes.

However, no method of transmitting or storing information can be guaranteed to be completely secure.

11. How long we keep your information

We keep personal information only for as long as it is reasonably necessary for the purposes for which it was collected.

The length of time we retain information depends on its nature and why we need it.

For example:

  • Customer and transaction records may be retained for as long as necessary to manage our business relationship.
  • Financial, accounting and tax records will normally be retained for the periods required by applicable law.
  • Correspondence may be retained for as long as reasonably necessary to deal with the matter and maintain appropriate business records.
  • Website analytics information is retained in accordance with our Google Analytics configuration.
  • Information that is no longer required will be securely deleted or otherwise disposed of.

Some business and financial records may need to be retained for a number of years after our relationship with you ends in order to comply with legal and accounting requirements.

12. Your data protection rights

Under UK data protection law, you may have the right to:

  • Ask for a copy of the personal information we hold about you
  • Ask us to correct inaccurate or incomplete information
  • Ask us to delete your personal information in certain circumstances
  • Ask us to restrict how we use your information in certain circumstances
  • Object to certain types of processing
  • Request that certain information you have provided to us is transferred to you or another organisation, where applicable
  • Withdraw consent where we rely on consent as our lawful basis

These rights are subject to certain legal conditions and exceptions, so they may not apply in every situation.

If you would like to exercise any of these rights, please contact us using the details provided above.

13. How to make a request

To make a request concerning your personal information, please contact:

Email: a
Address: Bradgate House, Chapel Lane, Easingwold, York, United Kingdom, YO61 3AE

We may need to ask you for information to confirm your identity before dealing with your request.

We will respond to valid requests within the time period required by applicable data protection law.

14. International transfers

Some of the technology and service providers we use may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.

This may include the use of adequacy regulations or appropriate contractual safeguards.

15. Complaints

If you have concerns about the way we are using your personal information, we would encourage you to contact us first so that we can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

You can find further information about making a complaint on the ICO's website.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, the services we use or applicable data protection requirements.

The latest version will be published on our website and will show the date it was last updated.

Last updated: 25 September 2026