Privacy Policy
This policy explains how Harp & Harp Ltd collects and uses personal information when you visit our website, sign up to our newsletter, contact us or work with us.
Who we are
Harp & Harp Ltd is a company registered in England and Wales (company number 09456552), with its registered office at 1 Gemini Court, 42a Throwley Way, Sutton, SM1 4AF. Our website address is https://harpandharp.co.uk. We are the data controller for the personal information described in this policy.
If you have any questions about this policy or how we handle your information, please email us at hello@harpandharp.co.uk.
What information we collect
When you contact us. If you email or call us, we keep your name, contact details and anything you tell us about your project, so that we can reply and discuss your enquiry.
When you subscribe to our newsletter. We collect your email address and, if you give it, your name. We also log the IP address you used when you signed up, to prevent abuse of our sign-up form. When we send newsletters, we record whether an email was opened and which links were clicked, so we can understand what our readers are interested in.
When you work with us. If you become a client, we hold the information needed to deliver your project. This includes contact details, property details, drawings, correspondence, invoices and payment records.
When you visit our website. Our website runs on WordPress and uses Jetpack, a service provided by Automattic, to measure visits and deliver images. When you visit, Jetpack collects technical information including your IP address, browser type, browser language, country, the pages you view, the links you click and the site that referred you. Automattic keeps this information for 28 days and uses it only to provide visitor statistics to us. Images on our site are delivered through Jetpack’s network, which means your IP address is shared with Automattic when they load.
How and why we use your information
We only use your personal information where the law allows us to:
- To respond to enquiries and deliver projects. This is necessary to enter into or carry out a contract with you, or to take steps at your request before doing so.
- To send our newsletter. If you signed up through our website, we rely on your consent. If you are a past client or professional contact, we rely on our legitimate interest in keeping in touch about our work, and every email gives you a simple way to unsubscribe.
- To run our business. This includes keeping accounts, meeting our professional and insurance obligations and defending legal claims. We do this to meet our legal obligations and in our legitimate interests.
- To understand how our website is used and to protect it from spam and abuse. This is in our legitimate interests.
We do not sell your personal information, and we do not use it for automated decision-making.
Who we share it with
We only share personal information where it’s needed, with:
- Service providers who help us run our business, including our website host, our email provider and Automattic, which provides Jetpack, Akismet, Gravatar and MailPoet, the service we use to send our newsletters.
- People involved in your project, such as consultants, contractors, builders and planning or building control authorities. Please note that information submitted with a planning application usually becomes publicly available on the local authority’s planning portal.
- Our professional advisers, such as accountants, lawyers and insurers, where needed.
- Regulators or law enforcement, where we are required to by law.
Automattic is based in the United States. Where personal information is transferred outside the UK, we make sure appropriate safeguards are in place, as required by UK data protection law.
How long we keep it
- Newsletter subscribers: until you unsubscribe. After that, we keep only your email address on a suppression list so that we don’t contact you again.
- Website statistics: 28 days, held by Automattic.
- Enquiries that don’t become projects: up to two years.
- Client and project records: 15 years after the project ends, to meet our professional obligations and in case of legal claims.
- Financial records: six years, as required by law.
Cookies
Our visitor statistics do not use cookies. Cookies are only set if you interact with certain features:
- Newsletter sign-up: if you subscribe through our website, a cookie remembers your choice.
- Logging in: our staff use cookies to log in to and manage the website. These don’t apply to visitors.
We do not use advertising cookies.
Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- ask us to restrict or stop using your information, or object to how we use it
- ask us to transfer your information to another organisation
- withdraw your consent at any time, where we rely on consent
To use any of these rights, email hello@harpandharp.co.uk. We will respond within one month. You can unsubscribe from our newsletter at any time using the link at the bottom of every email.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page.
Last updated: 14 October 2026