PRIVACY POLICY

Heritage and Bear Ltd
Last updated: March 2026

Heritage and Bear Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or engage our services.

1. Who We Are

Heritage and Bear Ltd
Registered in England and Wales
Company Number: 17058955
Registered Office: 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE, United Kingdom
Email: danny@heritageandbear.com

We are the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR).

2. What Information We Collect

We may collect and process the following personal data:

Information You Provide

  • Name

  • Company name

  • Job title

  • Email address

  • Phone number

  • Event details and requirements

  • Any information submitted via our contact form or email

Automatically Collected Information

When you visit our website, we may collect:

  • IP address

  • Browser type and version

  • Pages visited

  • Time and date of visit

  • Referring website

This is collected via cookies and analytics tools.

3. How We Use Your Information

We use your personal data to:

  • Respond to enquiries

  • Provide proposals and event services

  • Manage client relationships

  • Send relevant business communications

  • Improve our website and services

  • Comply with legal obligations

We do not sell your data.

4. Lawful Basis for Processing

Under UK GDPR, we rely on:

  • Contractual necessity – to deliver agreed services

  • Legitimate interests – to respond to enquiries and develop business relationships

  • Legal obligation – for accounting and regulatory compliance

  • Consent – where required (e.g. marketing emails)

5. Data Sharing

We may share personal data with:

  • Event venues and suppliers (where required to deliver services)

  • Professional advisers (legal, accounting)

  • IT and website service providers

All third parties are required to respect the security of your personal data.

6. Data Retention

We retain personal data only as long as necessary to:

  • Deliver services

  • Meet legal, accounting, or reporting requirements

  • Maintain reasonable business records

Typically, client data is retained for up to 6 years for accounting purposes.

7. Data Security

We implement appropriate technical and organisational measures to protect your data from:

  • Unauthorised access

  • Loss or misuse

  • Alteration or disclosure

8. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction

  • Request erasure

  • Object to processing

  • Restrict processing

  • Request data portability

  • Withdraw consent (where applicable)

To exercise these rights, contact: danny@heritageandbear.com

You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.