Privacy Policy

1. Who we are

This website is operated by HollowMINT, the trading name of HollowMint, of 5RA Station House, Stamford New Rd, Altrincham, WA14 1EP ("HollowMINT", "we", "us", "our"). For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, HollowMINT is the data controller for personal data collected through this website.

Contact: Contact@HollowMint.co.uk. HollowMINT is registered with the ICO as a data controller under registration reference ZC252208 — see the Legal Notice for full detail.

2. What data we collect

We collect the following categories of personal data:

• Contact form data — name, email address, and any message content you submit via our contact form.
• Technical data — IP address, browser type, device type, and pages visited, collected automatically by our hosting provider for security and reliability purposes.
• Correspondence — if you email or otherwise contact us directly, we keep a record of that correspondence.

We do not use third-party advertising or cross-site tracking cookies on this website. We do not sell personal data, to anyone, ever.

3. How we use your data, and our lawful basis

• Responding to enquiries — to reply to messages sent via the contact form. Lawful basis: consent (Art. 6(1)(a) UK GDPR) and, where an enquiry concerns a potential project, our legitimate interest in progressing pre-contractual discussions (Art. 6(1)(f)).
• Delivering a contract — where you become a client, to perform that engagement. Lawful basis: performance of a contract (Art. 6(1)(b)).
• Keeping this site secure and working — to detect abuse, prevent fraud, and maintain the reliability of the site. Lawful basis: legitimate interests (Art. 6(1)(f)).
• Legal compliance — where we're required to keep records (for example, for tax purposes). Lawful basis: legal obligation (Art. 6(1)(c)).

4. Who we share your data with

We keep the number of third parties who can access your data to a minimum. Data submitted through our contact form is processed by:

• Netlify, Inc. — our website hosting and form-submission provider. Netlify processes form submissions on our behalf as a data processor. See Netlify's privacy policy.

We do not share your data with any other third party for marketing purposes, and we do not sell personal data.

5. International data transfers

Netlify's infrastructure may process and store data outside the UK and European Economic Area, including in the United States. Where this occurs, we rely on appropriate safeguards recognised under UK GDPR, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the data recipient's certification under the UK Extension to the EU–US Data Privacy Framework. You can request further information about these safeguards by contacting us.

6. How long we keep your data

Contact form enquiries are retained for no longer than 12 months from the date of your last contact with us, unless you become a client, in which case data relevant to that engagement is retained in line with our contractual and legal obligations (including UK tax record-keeping requirements, generally 6 years). We periodically review and delete data we no longer need.

7. Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Request erasure of your data
• Restrict how we process your data
• Object to processing based on legitimate interests
• Receive your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with the ICO

To exercise any of these rights, contact us at Contact@HollowMint.co.uk. We'll respond within one month, as required by law.

If you're unhappy with how we've handled your data, you have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or by phone on 0303 123 1113.

8. Cookies

This site does not set third-party advertising or analytics cookies. Netlify may set a strictly necessary cookie to process form submissions securely (spam/bot filtering). If we add analytics or marketing cookies in future, this policy — and a consent banner — will be updated accordingly before they go live.

9. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including transmitting this site exclusively over HTTPS and limiting access to submitted data to those who need it to respond to your enquiry.

10. Children's privacy

This website is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under 13.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. The "last updated" date at the top of this page shows when it was last revised.