Our Huler Commitment

At Huler, we pride ourselves on delivering socially responsible software and services to our customers. As part of this, we recognise our responsibility to protect all of the data we hold or process, whether it belongs to Huler, our employees, customers or suppliers. The information we hold is one of our most valuable assets, preserving the confidentiality, integrity and availability of this information is essential. 

Our commitment to data security and management and the continuous improvement of information security controls includes; 

• implementing industry best practice security controls such as Cyber Essentials and assuring the effectiveness of our controls through certification to ISO 27001, the global standard for managing information security 
• complying with all relevant information management legislation, regulations, and standards 
• ensuring our employees are clear about their responsibilities regarding information security through regular training and awareness campaigns 
• effectively managing the security and scalability of all computer systems and supporting infrastructure 
• defining remote/off-site working expectations and standards regarding information security in a new world of hybrid working 
• acting quickly and implementing corrective action in regard to any information security events, breaches or identified weaknesses 

The type of personal information we collect  

We currently collect and process the following information: 

• Personal identifiers, contacts, and characteristics (for example, name and contact details) 
• Names 
• Emails 
• Contact details 
• Cookie identifiers 
• IP addresses 

 

Personal details: such as name, title, and contact details provided through our online contact form, internal support systems, face-to-face meetings, or other communication methods such as emails or electronic messaging. 

Profile data, such as a username or password when using our internal support systems. 

Image data, such as user profile images, or CCTV images when visiting our offices. 

Technical data, such as system access logs, web browser details, cookie identifiers, or IP addresses when viewing our web applications. 

 

How we get the personal information and why we have it 

Most of the personal information we process is provided to us directly by you for one of the following reasons: 

• Accessing and navigating https://huler.io 
• Providing contact details through our sales contact form application 
• General enquires and communications via our online contact form located at https://huler.io 
• As part of our day-to-day usage of electronic communications as part of recruitment, business networking, client support, and technical support for our web applications. 

We also receive personal information indirectly, from the following sources in the following scenarios: 

• Recruitment agencies  
• Awarding bodies 
• Direct job applications 

All of which contact us regarding opportunities within the organisation. 

We use the information that you have given us in order to: 

• Create and maintain user accounts 
• Communicate with our clients and users 
• Fulfil contractual obligations 
• Provide system security through access logs 
• As part of security and data protection audits 
• Account management 
• Recruitment process 
• Additional administrative tasks  

 

What sub-processors we use: 

AWS ( https://aws.amazon.com/) – AWS services are used for server hosting and provide technical support for internal and client web-based systems – including web and database hosting. Security monitoring and configuration, server backups, and other related tasks may be performed with or by AWS Ltd. 

MailChimp (https://mailchimp.com): Huler uses MailChimp for email marketing services. The service is integrated via the register interest form and, with your consent, stores your name, email and company information to our mailing list. 

CloudFlare (https://www.cloudflare.com/): CloudFlare provides a number of web-based services used to enhance the speed, security, and reliability of our web applications. CloudFlare services include a global CDN (Content Delivery Network), along with WAF, DDoS protection, and SSL encryption security features. 

Google Suite (https://workspace.google.co.uk/): GSuite is a collection of secure web-based applications and services provided on the Google Cloud used for administration tasks via documents and spreadsheets, cloud file storage, and email communications. 

Office365 (https://www.office.com/): Office365 is a set of Microsoft production tools for use in offline and online situations, or in combination with the OneDrive cloud storage platform. These tools are used for tasks such as word processing, spreadsheet creation and auditing, or internal and external scheduling and communications. 

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are: 

• Your consent. You are able to remove your consent at any time. You can do this by contact Huler via the details listed in this Policy. 
• We have a contractual obligation. 
• We have a legal obligation. 
• We have a legitimate interest. 

 

How we store your personal information  

Your information is securely stored on both our on-site workplace storage solutions, and our cloud storage solutions and hosting providers as outlined in sub-processors. 

Our on-site storage solutions are protected by physical and digital access control, and our data protection methods are regularly reviewed to ensure continued data safety. 

The cloud hosting services we use employ enterprise level security protection measures, and are credited with industry standards including ISO 27002, ISO 27001, and the Privacy Shield Framework. 

The duration for which we store personal data varies depending on what that data is used for. 

We retain data according to the periods outlined in our client contracts, and within any consent agreements or opt-ins between us and our users. 

For our online contact form and communications regarding recruitment we retain personal data for up to 12 months. 

In certain cases, we may need to retain data for a certain period after our contractual obligations have ended, or after a request has been made for the data to be deleted. This is for situations relating to legitimate business interests, to conduct audits, to comply with (and demonstrate compliance with) legal obligations, or to resolve disputes and enforce our agreements. 

 

Your data protection rights 

Under data protection law, you have rights including: 

Your right of access. You have the right to ask us for copies of your personal information.  

Your right to rectification. You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.  

Your right to erasure. You have the right to ask us to erase your personal information in certain circumstances.  

Your right to restriction of processing. You have the right to ask us to restrict the processing of your personal information in certain circumstances.  

Your right to object to processing. You have the the right to object to the processing of your personal information in certain circumstances. 

Your right to data portability. You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. 

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. 

Please contact us via the contact information below if you wish to make a request: 

Contact: Huler Ltd
Website:  https://huler.io/
Email:  hello@huler.io
Tel: 0330 133 1638
Address: Suite 2, Three Counties House, Festival Way, Stoke-on-Trent, England, ST1 5PX 

Contact: Data Protection Officer
Email:  dataprotection@huler.io
Tel: 0330 133 1638 

Address: Suite 2, Three Counties House, Festival Way, Stoke-on-Trent, England, ST1 5PX 

Under the UK GDPR, all users have the right to raise any concerns with the Information Commissioner’s Office should they wish to do so. 

 

How to complain 

If you have any concerns about our use of your personal information, you can make a complaint to us at: 

Contact: Data Protection Officer
Email:  dataprotection@huler.io
Tel: 0330 133 1638 

Address: Suite 2, Three Counties House, Festival Way, Stoke-on-Trent, England, ST1 5PX 

 

You can also complain to the ICO if you are unhappy with how we have used your data. 

The ICO’s address:             

Contact: Information Commissioner’s Office 

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, UK, SK9 5AF 

Helpline number: 0303 123 1113 

ICO website: https://www.ico.org.uk 

 

Third Party Processors 

Our carefully selected partners and service providers may process personal information about you on our behalf as described below: 

 

Digital Marketing Service Providers 

We periodically appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information. Our appointed data processors include: 

Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: dpo@sopro.io