Effective date: 2 August 2026. This notice explains how HedgeLens handles personal data when you use hedgelens.co.uk or contact us.
Controller and contact
The data controller is HedgeLens. Our correspondence address is Suite RA01, 195-197 Wood Street, London, E17 3NU, United Kingdom. Privacy enquiries and rights requests can be sent to hello@hedgelens.co.uk.
Information we process
- Contact and correspondence data: your name, email address, topic, page URL and message when you use the contact form or email us.
- Technical and security data: IP address, user agent, requested URL, date and time, response status and similar server-log information used to deliver and secure the site.
- Consent preferences: the first-party
hl_analyticspreference described in our Cookie Policy. - Commercial measurement data: when enabled, a page or link identifier, time and destination associated with a labelled outbound retailer link. We do not intentionally include contact-form content in this measurement.
Purposes and lawful bases
We process technical data to operate, protect and troubleshoot the website on the basis of legitimate interests. We process correspondence to answer your request, take steps you ask for before a possible contract, comply with legal duties, or pursue legitimate interests in operating an accountable publication. Non-essential analytics is activated only with consent. We do not sell personal data.
Who receives data
Data may be processed for us by Spaceship for website hosting and SpaceMail for business email, together with professional security, backup or technical-support providers used to maintain the service. Google Search Console is used for site-owner search administration and is not deployed as public visitor analytics. If optional Google Analytics is introduced, it will remain blocked until consent and this notice will be updated first.
When you follow a retailer or affiliate link, the destination operates under its own privacy notice. HedgeLens does not control the destination website.
International processing
Some service providers may process data outside the United Kingdom. Where UK data-protection law requires a safeguard, we expect the relevant provider to use an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another lawful transfer mechanism.
Retention
We aim to keep routine server and security logs for no longer than 90 days where the period is under our control; correspondence for up to 24 months after the matter is closed; consent preferences for 180 days; and aggregated editorial or commercial records for up to 36 months. Operational backups are normally overwritten within 30 days where under our control. A record may be retained longer where reasonably needed for security, a dispute, tax, fraud prevention or a legal obligation. Hosting and email providers may apply their own documented operational retention cycles.
Your rights
Depending on the circumstances, you may have rights of access, correction, deletion, restriction, objection and data portability, and the right to withdraw consent at any time. We may request proportionate information to confirm identity. You can complain to the UK Information Commissioner’s Office at ico.org.uk.
Children, security and changes
HedgeLens is a general-audience buying publication and is not directed at children. Please do not send unnecessary sensitive information. We use access controls, HTTPS, updates and backups appropriate to the service, but no internet service can guarantee absolute security. Material changes to this notice will be dated on this page.