Privacy Policy

1. Introduction

Hillway ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.hillwayco.uk or use our property consultancy services.

2. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, company name, and job title
• Property Information: Details about properties you enquire about or manage
• Communication Data: Records of our correspondence and enquiries
• Technical Data: IP address, browser type, and usage data collected via cookies

3. How We Use Your Information

We use your information to:

• Provide property and asset management consultancy services
• Respond to enquiries and communicate with you
• Send service updates and industry insights (with your consent)
• Improve our website and services
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal data based on:

• Consent: When you have given clear consent for us to process your data
• Contract: When processing is necessary for the performance of a contract
• Legal Obligation: When we need to comply with legal requirements
• Legitimate Interests: When necessary for our legitimate business interests

5. Data Sharing

We do not sell, trade, or rent your personal information. We may share your data with:

• Professional advisors (accountants, lawyers, insurers)
• Service providers who assist in our operations
• Regulatory bodies and law enforcement when required

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, typically:

• Client data: 7 years after the end of our business relationship
• Enquiry data: 2 years if no business relationship is established
• Marketing consent records: Until consent is withdrawn

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Object to processing
• Data portability
• Withdraw consent at any time

9. Cookies

Our website uses cookies to enhance user experience. We use:

• Essential cookies: Required for website functionality
• Analytics cookies: To understand how visitors use our site (Google Analytics)

You can control cookies through your browser settings.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Hillway Training iOS App

We offer a Hillway Training iOS app ("the App") available on the Apple App Store. The App provides access to training courses purchased through our website. The following explains how the App handles your data:

• Account: The App uses your existing Hillway Training account. Authentication is handled by Supabase (Supabase Inc.), which stores your email address and a hashed password. No separate account is created within the App itself.
• Course progress: Your course progress and audio playback position are stored in our Supabase database so they remain in sync across devices.
• Downloaded content: Audio files you choose to download are stored locally on your device for offline playback. These files remain on your device until you delete the App or remove the download.
• No in-app purchases: The App does not process payments. Course purchases are made on our website via Stripe. Your payment details are never handled by the App.
• No analytics or tracking: The App does not include any analytics SDK, advertising framework, or third-party tracking. We do not collect device identifiers or usage telemetry.
• Apple frameworks: The App uses Apple's standard AVFoundation and MediaPlayer frameworks for audio playback. No data is transmitted to Apple beyond what Apple collects as part of normal App Store and iOS operation, subject to Apple's own privacy policy.

Third-party services used by the App and website:

• Supabase (Supabase Inc.) — database, authentication, and file storage. Data is stored in the EU (eu-west-2 region). See Supabase Privacy Policy.
• Stripe (Stripe Payments Europe Ltd) — payment processing for course purchases on our website. The App does not interact with Stripe. See Stripe Privacy Policy.
• Apple Inc. — App Store distribution and iOS platform. See Apple Privacy Policy.

12. International Transfers

Your data is stored within the UK and EEA. Any transfers outside these areas will be protected by appropriate safeguards.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on this page.

14. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact:

Data Controller: Matt Fitzgerald
Email: hello@hillwayco.uk
Phone: 0333 404 0861
Post: Hillway, Cubo, 38 Carver Street, Sheffield, S1 4FS

15. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk