Privacy notice & company information

1. Who controls your information

For the public website, public suitability enquiries and Halo's own pre-sale business-contact activity, Halo Systems Ltd is the data controller.

For privacy questions or rights requests, email privacy@halosystems.co.uk or write to Halo Systems Ltd, 128 City Road, London, United Kingdom, EC1V 2NX and mark the correspondence Data Protection. If you already have an active Halo business conversation, you may also raise the request through that existing communication channel.

2. Information we use

• Suitability enquiries: name, work email, organisation, role/function and the business/decision context you choose to submit.
• Pre-sale business contacts: professional name, role, employer, public professional source/contact route, contact history, response and objection/suppression state.
• Security and abuse-control data: limited request/network information needed to protect the public service and rate-limit abuse.
• Boundary Check: the decision-boundary information you type is processed in your browser and is not persisted by Halo. Halo may record fixed aggregate interaction events that do not contain the text you entered.

Do not send confidential evidence, decision records, special-category data or production datasets through the public suitability route.

3. Why we use it and our lawful basis

Responding to public business enquiries and assessing service fit

Legitimate interests in operating Halo's B2B service and responding to people who approach us.

Relevant B2B outreach to corporate contacts

Legitimate interests where electronic-marketing rules permit it. Where consent is legally required, we do not substitute legitimate interests for that consent.

Security, abuse prevention and service integrity

Legitimate interests in protecting Halo, its systems and public users.

Legal, regulatory, accounting or dispute records

Legal obligation where applicable, and legitimate interests in establishing, exercising or defending legal rights.

Your right to object to direct marketing is absolute. If you tell us not to use your information for direct marketing, we will stop and retain only the minimum suppression information needed to honour that objection.

4. Where information comes from

We receive information directly from you when you submit a public enquiry or communicate with Halo. For pre-sale B2B research, we may also use professional information made public by organisations, professional profiles, company websites, job postings and other public business sources.

5. Who receives it

Halo does not sell personal information. Public website hosting, security and the raw public-enquiry queue are provided through Cloudflare. Halo limits public-enquiry processing to the minimum information needed for suitability review and operator follow-up.

Cloudflare and its subprocessors may process data outside the United Kingdom. Where UK-protected personal data is transferred internationally, Cloudflare's current data-processing terms provide for applicable adequacy arrangements and/or contractual safeguards including the UK Addendum to the EU Standard Contractual Clauses.

6. How long we keep it

• Raw public suitability-enquiry queue: automatically expires after 90 days.
• Abuse-control counters: short-lived and automatically expire after the relevant rate-limit window.
• Pre-sale contact records: kept only while relevant to a current or reasonably anticipated business conversation, legal/record-keeping need, or an objection/suppression requirement.
• Direct-marketing suppression: minimum identifying information may be retained for as long as reasonably necessary to ensure we do not contact you again for direct marketing.
• Contract, accounting or legal-claim records: retained for the period required by applicable law or reasonably needed to establish, exercise or defend legal rights.

7. Your rights

Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, objection and data portability. You can also object at any time to use of your information for direct marketing.

If you are unhappy with how Halo handles personal information, you may complain to the Information Commissioner's Office.

8. Cookies, automated decisions and paid-pilot evidence

Halo's current public application code does not set advertising or analytics cookies and does not use browser storage for marketing profiles. Infrastructure providers may use strictly necessary security/operational mechanisms where required to provide their service.

The public website does not make a solely automated decision about you that produces legal or similarly significant effects.

This notice does not authorise Halo to receive confidential buyer evidence for a paid pilot. Buyer evidence remains subject to a separate agreed scope, handling route, contractual/data-protection terms and explicit evidence-admission authority before processing.

9. Changes to this notice

Halo will update this page when the public processing boundary materially changes. The date at the top shows the current version.