HEJLO LIMITED

Privacy Policy

PRIVACY POLICY Effective Date: 9 March 2026 HEJLO LIMITED | Registration No: 13352544 | 53 Rodney Road, London, SE17 1BA

1. Data Controller

HEJLO LIMITED (Company Registration No. 13352544), a company incorporated under the laws of England and Wales, with its registered office at 53 Rodney Road, London, SE17 1BA, is the Data Controller responsible for the processing of personal data collected through this website, accessible at http://lightgrey-manatee-647618.hostingersite.com.

For all privacy-related enquiries, you may contact us at:

2. Legal Framework and Scope

This Privacy Policy has been drafted in compliance with the following legal instruments:

  • UK General Data Protection Regulation (UK GDPR) as retained in UK domestic law by the European Union (Withdrawal) Act 2018, supplemented by the Data Protection Act 2018
  • Regulation (EU) 2016/679 (EU GDPR), to the extent applicable to EEA residents
  • The Privacy and Electronic Communications Regulations 2003 (PECR)
  • The Computer Misuse Act 1990
  • The Network and Information Systems (NIS) Regulations 2018
  • Applicable provisions of the California Consumer Privacy Act (CCPA) 2018, as amended by the CPRA 2020

3. Data We Collect

3.1 Information Provided Directly by Users When you leave a comment or interact with content on the Website, we may collect: your name, email address, website URL (if submitted), and the content of your comment.

3.2 Automatically Collected Technical Data When you visit the Website, the following is collected automatically: IP address, browser type and user agent string, operating system and device type, pages visited and time spent, and date and time of access.

3.3 Cookies and Similar Technologies We use cookies as described in Section 7 of this Policy.

3.4 Gravatar Integration Where you submit an email address with a comment, an anonymised hash (MD5) of that address may be transmitted to Automattic, Inc. via the Gravatar service to retrieve your profile image. The Gravatar privacy policy is available at: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

3.5 Media Uploads If you upload images to the Website, you should avoid uploading images with embedded location data (EXIF GPS). The Website does not automatically strip such metadata, and visitors may be able to download and extract location data from uploaded images.

4. Legal Bases for Processing

We rely on the following lawful bases under Article 6 UK GDPR / EU GDPR:

  • Consent (Art. 6(1)(a)): For optional cookies and marketing communications
  • Legitimate Interests (Art. 6(1)(f)): For spam detection, security, and website analytics
  • Legal Obligation (Art. 6(1)(c)): Where required by applicable law
  • Contractual Necessity (Art. 6(1)(b)): Where processing is necessary to fulfil an arrangement with you

5. Purposes of Processing

We process personal data to: display user-submitted comments; detect and prevent spam and fraud; facilitate user account management; maintain website security; comply with legal obligations; and respond to data subject requests.

6. Data Retention

  • Comments and metadata: retained indefinitely to enable moderation, unless erasure is requested
  • User account information: retained for the duration of the account and a reasonable period thereafter
  • Technical logs and IP address records: retained for up to 12 months
  • Cookie data: as specified in Section 7

Where retention is required by law or regulation, data may be kept beyond the above periods.

7. Cookies

7.1 Strictly Necessary Cookies

  • Session cookies: temporary, deleted when you close your browser, contain no personal data
  • Login cookies: last two (2) days; if “Remember Me” is selected, two (2) weeks
  • Screen preferences cookies: last one (1) year
  • Article edit cookies: last one (1) day, contain only the post ID

7.2 Functional Cookies With your consent, cookies may save your name, email, and website URL to pre-fill comment forms on future visits. These last one (1) year.

7.3 Managing Cookies You may disable or delete cookies through your browser settings. Disabling strictly necessary cookies may impair Website functionality.

8. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share data in the following circumstances:

  • Spam Detection: Comments may be checked through an automated spam detection service
  • Password Resets: Your IP address will be included in password reset emails
  • Gravatar (Automattic, Inc.): As described in Section 3.4
  • Legal Compliance: Where required by law, court order, or regulatory authority
  • Business Transfers: In the event of a merger or acquisition, subject to equivalent privacy protections

9. International Data Transfers

Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place including Standard Contractual Clauses, adequacy decisions, or other recognised transfer mechanisms under Chapter V UK GDPR / EU GDPR.

10. Your Rights

You have the following rights regarding your personal data:

  • Right of Access (Art. 15): Obtain a copy of data we hold about you
  • Right to Rectification (Art. 16): Request correction of inaccurate data
  • Right to Erasure (Art. 17): Request deletion, subject to legal retention obligations
  • Right to Restriction (Art. 18): Request limits on how we use your data
  • Right to Data Portability (Art. 20): Receive your data in a machine-readable format
  • Right to Object (Art. 21): Object to processing based on legitimate interests

To exercise any right, contact us at alsahafhayder6@gmail.com. We will respond within one (1) calendar month. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data. However, no internet transmission is entirely secure and we cannot guarantee absolute security.

12. Children’s Privacy

This Website is not directed to individuals under the age of 13. We do not knowingly collect personal data from children and will delete any such data if discovered.

13. Changes to This Policy

We may update this Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this Policy periodically.

14. Contact Us

© 2026 HEJLO LIMITED. All Rights Reserved. Registered in England & Wales No. 13352544.