Last updated: 11 November 2026

This policy explains what personal data The Haven Data Services collects, why we collect it, how we look after it and what your rights are. It covers visitors to this website, people who contact us, and the businesses and contacts we work with or may work with.

Who we are

The Haven Data Services is the trading name of The Haven (Oldham) Ltd, a company registered in England and Wales (company number 12277569). We are the data controller for the personal data described in this policy.

• Address: Office 3, Greenacres Centre, Galland Street, Oldham, OL4 3EU
• Email: contact@the-haven.co.uk
• Phone: 0161 826 2303
• ICO registration number: ZA867153

What we collect and why

When you contact us

If you fill in a form on this site, email us or call us, we collect the details you give us. This is usually your name, company, job title, email address, phone number and the details of your enquiry. We use them to reply to you, prepare quotes and follow up on your enquiry.

Our lawful basis is our legitimate interest in responding to business enquiries, or taking steps at your request before entering into a contract.

When you become a customer

To deliver our services, we hold contact details for the people we work with at your organisation, along with support tickets, service records, contract and billing information. Our lawful basis is performance of our contract with your organisation, and our legal obligations for accounting and tax records.

Where we manage your IT systems, we may also process personal data held on those systems on your behalf. In that case we act as a data processor under the terms of our agreement with you, not under this policy.

Business marketing

We may send relevant information about our services to people in their business role. That includes existing customers and contacts at organisations whose needs match what we offer. We get these details from you directly, from your organisation’s public website, or from professional networks such as LinkedIn.

Our lawful basis is our legitimate interest in promoting our services to businesses. Every marketing email includes a way to opt out, and you can ask us to stop at any time by emailing contact@the-haven.co.uk. Where the law requires your consent for marketing, for example email to a sole trader, we will only contact you with that consent.

When you visit this website

We collect information about how visitors use the site, such as the pages viewed, how you arrived, your approximate location, your device and browser. We use it to understand which content is useful and to improve the site. Where this relies on non-essential cookies, we ask for your consent through our cookie banner first.

Cookies and similar technologies

This site uses the following:

• Strictly necessary cookies: these make the site work and remember your cookie choices. They do not need consent.
• Google Analytics: measures how visitors use the site.
• HubSpot: runs our contact forms, our cookie banner and website analytics. It can link your visits to the details you submit in a form.
• Jetpack Stats (Automattic): basic visitor statistics.
• Google reCAPTCHA: protects our forms from spam and abuse.
• Google Maps: shows our location on the Contact page.

You can change your cookie choices at any time through the cookie banner, or by clearing cookies in your browser.

Who we share your data with

We never sell your personal data. We share it only with service providers who help us run the business, under contracts that require them to protect it:

• HubSpot: customer relationship management, forms and email
• Microsoft: email, documents and collaboration (Microsoft 365)
• Google: website analytics, maps and spam protection
• Automattic (Jetpack) and OVHcloud: website services and hosting
• Cloudflare: website performance and security
• Our accounting software provider, for invoicing and bookkeeping
• Trusted subcontractors and suppliers, where needed to deliver a service you have asked for

We may also share data where the law requires it, or to protect our legal rights.

Transfers outside the UK

Some of these providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations or on approved safeguards such as the UK International Data Transfer Addendum, so your data stays protected to UK standards.

How long we keep your data

• Enquiries that do not lead to work: up to 2 years after our last contact
• Customer records, contracts and invoices: 6 years after the end of our contract, as required for legal and tax purposes
• Marketing contacts: until you opt out, or after 2 years without engagement
• Website analytics data: up to 14 months

How we protect your data

As a managed IT and cyber security provider, we apply the same controls we use for our customers. These include multi-factor authentication, encryption, access controls and monitored, patched systems.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the personal data we hold about you
• have inaccurate data corrected
• have your data deleted, where we have no legal reason to keep it
• restrict or object to how we use your data, including for marketing at any time
• receive your data in a portable format
• withdraw your consent, where we rely on it

To use any of these rights, email contact@the-haven.co.uk. We will reply within one month.

If you are unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.