Privacy Policy
Last updated: 1st October 2026
1. Who We Are
Ironhawk Facilities Management Limited (“we”, “us”, “our”) is the data controller responsible for your personal data collected through www.ironhawk.co.uk (the “Website”).
Company name: Ironhawk Facilities Management Limited
Company registration number: 17422374
Company address: Office C, The Old Stables Business Centre, Knatts Valley Road, Sevenoaks, Kent TN15 6XY
Contact email: hello@ironhawk.co.uk
We have not appointed a formal DPO, but you can contact us using the details above regarding any data protection matter.
This policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
Identity data: name, username, title
Contact data: email address, postal address, telephone number
Technical data: IP address, browser type and version, device information, operating system, time zone setting
Usage data: information about how you use our Website (pages visited, time spent, click patterns)
Marketing and communications data: your preferences in receiving marketing from us and communication preferences
Transaction data: details of payments and purchases (if applicable)
Account data: login credentials, account history (if applicable)
We do not knowingly collect special category data (e.g. health, religion, sexual orientation) unless explicitly stated elsewhere and with your explicit consent.
3. How We Collect Your Data
Directly from you: when you fill in forms, create an account, subscribe to a newsletter, make a purchase, or contact us
Automatically: through cookies and similar tracking technologies as you interact with the Website (see Section 9)
From third parties: such as analytics providers, payment processors, or social media platforms (where applicable)
4. Legal Basis for Processing
Under UK GDPR, we only process your personal data where we have a lawful basis to do so. Depending on the purpose, this may be:
Legal Basis (Example Use)
Consent (Marketing emails, non-essential cookies)
Contract (Processing an order, providing a service you’ve requested)
Legal obligation (Retaining records for tax or regulatory purposes)
Legitimate interests (Website analytics, fraud prevention, improving our services (balanced against your rights))
Where we rely on consent, you have the right to withdraw it at any time (see Section 8).
5. How We Use Your Data
We use your personal data to:
Provide, operate, and maintain the Website
Process transactions and fulfil orders
Respond to enquiries and provide customer support
Send administrative communications (e.g. order confirmations, policy updates)
Send marketing communications, where you have consented (with an opt-out available in every email)
Improve and personalise the Website and user experience
Monitor usage and analyse trends
Detect, prevent, and address technical issues, fraud, or security incidents
Comply with legal obligations
We do not sell your personal data to third parties.
6. Who We Share Your Data With
We may share your personal data with:
Service providers: hosting providers, payment processors, email/marketing platforms, analytics providers (e.g. Google Analytics), IT support — all bound by data processing agreements
Professional advisers: lawyers, auditors, insurers where necessary
Regulatory and law enforcement authorities: where required by law
Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction
We require all third parties to respect the security of your data and to treat it in accordance with the law.
7. International Data Transfers
Where we transfer your personal data outside the UK (for example, to service providers based in the US or EU), we ensure an adequate level of protection is in place, such as:
Transferring to countries deemed adequate by the UK government
Using Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA)
Relying on other safeguards permitted under UK GDPR
8. Your Rights
Under UK GDPR, you have the right to:
Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate or incomplete data
Erasure — request deletion of your data (“right to be forgotten”), in certain circumstances
Restrict processing — request that we limit how we use your data
Data portability — request your data in a structured, machine-readable format
Object — object to processing based on legitimate interests or for direct marketing
Withdraw consent — where processing is based on consent, at any time
Not be subject to automated decision-making, including profiling, which produces legal or similarly significant effects (where applicable)
To exercise any of these rights, contact us at hello@ironhawk.co.uk. We will respond within one month, as required by law.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): Website: ico.org.uk | Helpline: 0303 123 1113
9. Cookies
Our Website uses cookies and similar tracking technologies to improve your experience. Cookies are small text files stored on your device.
We use the following types:
Strictly necessary cookies — required for the Website to function (no consent required)
Analytics/performance cookies — help us understand how visitors use the Website (consent required)
Functionality cookies — remember your preferences (consent required)
Marketing/targeting cookies — used to deliver relevant advertising (consent required)
On your first visit, you will be presented with a cookie banner allowing you to accept or reject non-essential cookies. You can also manage cookie preferences through your browser settings at any time.
10. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary by data type — for example:
-
Account data: retained while your account is active, plus 6 years after closure
-
Transaction records: retained for 6 years for tax/accounting purposes
-
Marketing data: retained until you withdraw consent or unsubscribe
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including encryption, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
12. Children’s Privacy
Our Website is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top will reflect the most recent revision. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Ironhawk Facilities Management Limited
Email: hello@ironhawk.co.uk
Address: Office C, The Old Stables Business Centre, Knatts Valley Road, Sevenoaks, Kent TN15 6XY
Phone: 0208 057 8875