How Huwamai handles personal data

1. Who we are

Huwamai provides demand-protection services for businesses. For data protection purposes, Huwamai is the controller of the personal data collected through this website unless this policy says otherwise.

2. What personal data we collect

Depending on how you interact with us, we may collect:

• your name;
• your email address;
• your phone number;
• your business name and role;
• details you submit when making an enquiry or booking a review;
• records of our communications with you, including emails and meeting notes;
• basic technical data such as IP address, browser type, and page usage if analytics tools are enabled on the site.

Please do not submit unnecessary sensitive personal data through this website. If later service delivery involves call recordings or health-related information, that should be covered by a more detailed client agreement and operational privacy notice.

3. How we collect personal data

We collect personal data when you:

• submit an enquiry on this website;
• book a Demand Protection Review through the embedded Cal.com calendar;
• contact us by email or phone;
• interact with the website while analytics or cookies are active.

4. Why we use personal data

We use personal data to:

• respond to enquiries;
• schedule, confirm, and manage discovery calls;
• assess whether our services are a fit for your business;
• send follow-up information related to your enquiry;
• operate, secure, and improve the website;
• keep internal records of conversations and service interest.

5. Lawful bases for processing

Under UK GDPR, organisations need a lawful basis for processing personal data. We generally rely on:

• Legitimate interests for handling business enquiries, managing communications, and operating the website, where those interests are not overridden by your rights and interests.
• Consent where you have clearly opted in, or where consent is the appropriate basis for specific communications or technologies.
• Contract where processing is necessary to take steps at your request before entering into a contract or to deliver agreed services.

6. Who we share personal data with

We do not sell personal data.

We may share personal data with trusted service providers where necessary to run the website or deliver our services, such as:

• website hosting providers;
• email and communication platforms, including Google Plc and Instantly.ai;
• calendar or scheduling tools, including Cal.com;
• CRM or lead-management tools;
• analytics providers;
• telephony or voice infrastructure providers, if relevant, including VAPI and RatalAI.

These providers act on our instructions or under their own privacy obligations, depending on the context.

7. International transfers

Some suppliers may process data outside the UK. Where that happens, we will only use providers and transfer mechanisms that are intended to provide an appropriate level of protection under applicable data protection law.

8. Data retention

We keep personal data only for as long as reasonably necessary for the purpose it was collected, including to respond to enquiries, maintain business records, and meet legal, accounting, or regulatory requirements.

If you do not become a client, enquiry information is typically retained only for a limited period unless there is a legitimate reason to keep it longer. If you become a client, retention should be covered in your client agreement and operational documentation.

9. Your rights

Under UK GDPR, you may have rights including the right to:

• be informed about how your personal data is used;
• request access to your personal data;
• request correction of inaccurate personal data;
• request deletion in certain circumstances;
• request restriction of processing in certain circumstances;
• object to certain types of processing;
• request data portability where applicable.

To exercise any of these rights, contact: info@huwamai.com.

10. Complaints

If you have concerns about how your personal data is handled, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO).

11. Security

We take reasonable technical and organisational steps to protect personal data against unauthorised access, misuse, loss, or disclosure. No system is completely risk-free, so you should not send unnecessary sensitive information through general website forms.

12. Cookies and analytics

This website uses cookies and similar technologies to understand how visitors use the site, improve performance, and measure the effectiveness of our marketing and communications.

What we use

Where you provide consent, we use analytics tools such as Google Analytics to collect information about how visitors interact with the site. This may include:

• pages visited and time spent on the site;
• interaction events such as video plays, button clicks, and booking activity;
• device and browser information;
• approximate location based on IP address;
• traffic source information, including referral data and UTM parameters.

How analytics is used

This information helps us to:

• understand how visitors use the website;
• identify which parts of the page are effective or need improvement;
• measure engagement with content such as videos;
• understand the effectiveness of outreach and campaigns;
• improve the overall user experience and performance of the site.

Consent

Non-essential cookies and analytics technologies are only activated after you provide consent through the cookie banner. You can accept or reject analytics cookies when you first visit the site.

You can also change your preferences at any time by using the “Cookie Settings” control available on the website.

Legal basis

Where required under UK law, we rely on your consent to use non-essential cookies and analytics tools. Essential cookies necessary for the operation and security of the site may be used without consent.

Data sharing

Analytics data may be processed by third-party providers such as Google. These providers may process data outside the UK. Where this occurs, we rely on appropriate safeguards intended to protect personal data.

Data retention

Analytics data is retained only for as long as necessary to analyse website performance and user behaviour, after which it is deleted or anonymised in line with provider settings.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date shown at the top.