Everything The Hayes Collective Ltd does with personal data, set out plainly.
The Hayes Collective Ltd is the data controller for the personal data described on this page. We are registered in England and Wales, company number 16610905, and registered with the Information Commissioner's Office under reference ZB966050.
You can contact Hayley Hayes, Founder, at hayley@thehayescollective.co.uk. If anything here is unclear, or you want to know exactly what we hold about you, that is the address to use.
We use Plausible Analytics to count visits. It sets no cookies, collects no personal data and does not follow you across other websites. It records the page visited, the site that referred you, the country and the broad type of device, all in aggregate. Nothing in it identifies you, which is why this site asks you to accept nothing.
The site is hosted by Webflow, whose servers keep standard access logs, including IP addresses, to keep the site running and secure.
The contact form asks for your name, organisation, email address and message. We use them to reply, and if work follows, to run it. The lawful basis is the steps leading to a contract where you are asking about working together, and legitimate interests otherwise.
Submissions arrive through Webflow and are then held in email. We keep enquiries that do not lead to work for up to twelve months.
If you sign up for Insights we hold your email address and organisation, and we use them only to send you our own writing. We will not pass your address to anyone else. Every email carries an unsubscribe link, and replying to say stop works just as well. The lawful basis is your consent, which you can withdraw whenever you like.
Consultancy work usually involves personal data belonging to your organisation: interview notes, workshop records, survey responses, staff and stakeholder contact details. Where that happens we act on your instructions as a processor, under the data processing terms in our contract, and you remain the controller.
Where a project involves people's lived experience, or any special category data, we agree the approach, the consent wording and the retention period with you in writing before any fieldwork begins.
We also approach people in relevant roles about our services, and about products we are developing, including GLQ, a quoting tool for firms handling IT asset disposition.
Your name, job title, employer, business email address, the public web pages where we found your details, your public LinkedIn profile address, and a record of any emails between us. We do not collect personal email addresses, home addresses or personal telephone numbers.
Your organisation's website, Companies House, the trade press and your public LinkedIn profile. We use only details people have published themselves, and we keep a record of where we found them.
Legitimate interests. We approach people in their professional role, about something relevant to that role, and we make it easy to stop. We have carried out and recorded a legitimate interests assessment, and you are welcome to ask for a copy.
Reply to any email and say so, or write to hayley@thehayescollective.co.uk. We will then keep only your name, business email address and a note not to contact you again, so that the request holds.
We do not sell your data, and we do not share it for anyone else's marketing. The services we rely on are:
Webflow, which hosts this website and receives form submissions.
Microsoft 365, which we use for email, documents and file storage.
Plausible Analytics, for the visitor counts described above.
Claude, an AI assistant made by Anthropic, which we use to research public sources and draft material. We do not put client confidential information or special category data into it.
Most of what we use sits in the UK or the European Economic Area. One thing does not. Anthropic is a United States company, so material we draft with its assistant is processed there, under the contractual terms in our agreement with it. If this matters to you, email and we will tell you precisely what applies to your data.
Enquiries that do not lead to work: up to twelve months.
Outreach contacts: up to twelve months from our last contact, unless we start working together.
Requests not to be contacted: kept indefinitely, because that is the only way the request holds.
Mailing list: until you unsubscribe.
Client project records: as agreed in the contract. Normally six years for the commercial record, and considerably less for the working material.
You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to limit what we do with it, or object to us using it at all, including for any further contact. Email hayley@thehayescollective.co.uk and we will answer within one calendar month.
If you are not satisfied with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.
We will update this page whenever our practices change, and the date at the top will tell you when that last happened.
Practical consultancy for public systems, commercial enterprises, founder-led organisations and community interest companies.