Who is responsible for your information
The data controller is Hegarty House Ltd, formerly SH Policy Support Limited. Registered office: 6 Wymbush Crescent, Bristol, England, BS13 0BB. Company number: 16080519. ICO registration: ZB934746.
Privacy contact: hello@hegartyhouse.co.uk.
What we collect
Depending on how you interact with us, we may collect your name, email address, organisation or role, enquiry details, application answers, booking and payment status, attendance and operational records, feedback, correspondence, and technical information needed to run the website securely.
For FIRE-UP services, we may also hold practical information you choose to provide so that we can assess fit, deliver the service, support accessibility, manage participation, or respond to a safeguarding concern. Please avoid sending medical diagnoses or detailed sensitive history unless it is genuinely necessary.
Why we use personal information
We use information to respond to enquiries; take steps before entering a contract; provide paid services; manage bookings, applications, attendance and participant communications; issue invoices and keep accounting records; improve our work; protect people and the business; and meet legal obligations.
Our lawful bases may include contract, steps taken at your request before a contract, legal obligation, legitimate interests and consent. Marketing is not bundled into ordinary enquiries. Where consent is used, it can be withdrawn.
Who may receive information
Access inside Hegarty House is limited to people who need the information for an approved purpose. We may also use service providers for website hosting, email, calendars, forms, documents, booking, payment, accounting and programme delivery. The website is hosted with IONOS. The tools used for communications, administration, booking and accounts include Google Workspace, Acuity Scheduling, Xero and Notion. A programme may have additional delivery providers described in its participant privacy information.
We may disclose information where required by law, to protect vital interests, obtain professional advice, defend legal rights, or manage a lawful business restructuring.
International transfers
Some technology providers may process personal information outside the UK. Where that happens, we require an appropriate lawful transfer mechanism, such as UK adequacy regulations, the International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard.
How long we keep information
We keep information only as long as needed for the purpose it was collected, plus any legal or contractual record-keeping period. As a working guide: unsuccessful or withdrawn FIRE-UP applications are normally kept for six months after the final decision; participant operational records for up to 24 months after the supported period; accounting and tax records for six years after the relevant financial year; ordinary enquiries only as long as reasonably needed for follow-up and record keeping; and marketing details until you unsubscribe or the list is cleaned.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to access your information, correct it, request erasure, restrict processing, object to certain processing, receive certain information in a portable format, and withdraw consent where consent is the lawful basis. You have an absolute right to object to direct marketing.
To exercise a right, email hello@hegartyhouse.co.uk. We may need to verify your identity.
Complaints and changes
Please contact us first if something concerns you so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office.
This notice will be reviewed when our services, suppliers or processing purposes materially change.
Contact-form security
The contact form uses a short-lived security token and anti-spam checks. It does not add you to a marketing list. Please do not include medical diagnoses or other sensitive personal details in a general enquiry.
Automated decisions
FIRE-UP applications are not accepted or declined solely by automated decision-making. Sean retains responsibility for the decision.