Our Huler Commitment

At Huler, we pride ourselves on delivering socially responsible software and services to our customers. As part of this, we recognise our responsibility to protect all of the data we hold or process, whether it belongs to Huler, our employees, customers, or suppliers. The information we hold is one of our most valuable assets, and preserving the confidentiality, integrity, and availability of this information is essential.

Our commitment to data security and management and the continuous improvement of information security controls includes:

• Implementing industry best practice security controls such as Cyber Essentials and assuring the effectiveness of our controls through certification to ISO 27001, the global standard for managing information security.
• Complying with all relevant information management legislation, regulations, and standards.
• Ensuring our employees are clear about their responsibilities regarding information security through regular training and awareness campaigns.
• Effectively managing the security and scalability of all computer systems and supporting infrastructure.
• Defining remote/off-site working expectations and standards regarding information security in a new world of hybrid working.
• Acting quickly and implementing corrective action in regard to any information security events, breaches, or identified weaknesses.

The type of personal information we collect

We currently collect and process the following information:

• Personal identifiers, contacts, and characteristics (e.g., name and contact details)
• Personal details: such as name, title, and contact details provided through our online contact form, internal support systems, face-to-face meetings, or other communication methods such as emails or electronic messaging.
• Profile data: such as a username or password when using our internal support systems.
• Image data: such as user profile images or CCTV images when visiting our offices.
• Technical data: such as system access logs, web browser details, cookie identifiers, or IP addresses when viewing our web applications.
• Session Replay data: We use anonymised session replay tools to understand user interactions within our application. Any user information displayed in the UI is automatically redacted.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• Accessing and navigating https://huler.io
• Providing contact details through our sales contact form application
• General enquiries and communications via our online contact form located at https://huler.io
• As part of our day-to-day usage of electronic communications as part of recruitment, business networking, client support, and technical support for our web applications.

We also receive personal information indirectly from:

• Recruitment agencies
• Awarding bodies
• Direct job applications

What sub-processors we use

We use trusted third-party processors to help us deliver our services securely and effectively. These include:

• AWS (https://aws.amazon.com/) – Used for server hosting and technical support for internal and client web-based systems.
• MailChimp (https://mailchimp.com) – Used for email marketing services.
• CloudFlare (https://www.cloudflare.com/) – Enhances the speed, security, and reliability of our web applications.
• Google Suite (https://workspace.google.co.uk/) – Provides document management, cloud file storage, and email communications.
• Office365 (https://www.office.com/) – Used for internal and external communications and document management.
• PostHog (https://posthog.com/) – Used for analytics and session replay. All user data is anonymised, and UI-displayed personal data is redacted.
• Sentry (https://sentry.io/) – Used for application error tracking and logging. No personally identifiable information is captured.
• Intercom (https://www.intercom.com/) – Used for customer support and interactions. We pass user name, email, user ID, and organisation ID to enable personalised support.

How we store your personal information

Your information is securely stored on both our on-site workplace storage solutions and our cloud storage solutions as outlined above.

• On-site storage is protected by physical and digital access control.
• Cloud hosting services employ enterprise-level security protections and are certified with industry standards such as ISO 27001.
• Data retention periods align with client contracts and consent agreements.
• Contact form and recruitment-related data is retained for up to 12 months.
• Some data may be retained beyond the standard period for audits, compliance, and dispute resolution purposes.

Your data protection rights

Under data protection law, you have rights including:

• Your right of access – You can request copies of your personal information.
• Your right to rectification – You can ask us to correct incomplete or inaccurate personal information.
• Your right to erasure – You can ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing – You can ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing – You can object to the processing of your personal information in certain circumstances.
• Your right to data portability – You can ask that we transfer the personal information you provided to another organisation or to you, in certain circumstances.

Requests are free of charge and responded to within one month. Contact us at:

Huler Ltd

Website: https://huler.io/

Email: hello@huler.io

Tel: 0330 133 1638

Address: Suite 2, Three Counties House, Festival Way, Stoke-on-Trent, England, ST1 5PX

Data Protection Officer

Email: dataprotection@huler.io

Tel: 0330 133 1638

You can also raise concerns with the Information Commissioner’s Office (ICO):

https://www.ico.org.uk

Helpline: 0303 123 1113

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, UK, SK9 5AF

Third-Party Processors

Our carefully selected partners and service providers may process personal information about you on our behalf, including:

• Sopro (https://sopro.io) – Used for compliant digital marketing activities. Their Data Protection Officer can be contacted at: dpo@sopro.io

This Privacy Policy was last updated on 10th April 2025. We may update this notice from time to time, so please check back periodically.