PRIVACY POLICY

Last Updated 26th December 2025

1. Introduction

Welcome to Hear 4 The Long Term Ltd ("H4TLT", "we", "us", or "our"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website at https://www.h4tlt.co.uk (the "Website"), use our embedded Compliance Checker application

(the "Application"), or engage with our services.

This policy should be read in conjunction with our Website Terms and Conditions and our Cookies Policy.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

Contact and Enquiry Data: Information you provide when you contact us, such as your name, job title, company name, email address, and telephone number.
Compliance Checker Data: Information you input into the Application, which may include details about your business, workforce, existing hearing protection measures, and contact information.
Client and Service Delivery Data: Information required to provide our services, including business details for invoicing, site locations for service delivery, and contact details for operational communication. Where you provide us with personal data relating to your employees (e.g., for hearing tests), this may include names and work-related details.
Website Usage Data: We may collect information about your visit to our Website, such as your IP address, browser type, operating system, and pages visited. This is primarily collected through cookies, as detailed in our Cookies Policy.

We do not intentionally collect any special category data (such as health data) through our Website's general enquiry or Compliance Checker forms. Our hearing health surveillance services are conducted under separate service agreements and with appropriate safeguards.

3. How We Use Your Personal Data

We may collect and process the following types of personal data:

Contact and Enquiry Data: Information you provide when you contact us, such as your name, job title, company name, email address, and telephone number.
Compliance Checker Data: Information you input into the Application, which may include details about your business, workforce, existing hearing protection measures, and contact information.
Client and Service Delivery Data: Information required to provide our services, including business details for invoicing, site locations for service delivery, and contact details for operational communication. Where you provide us with personal data relating to your employees (e.g., for hearing tests), this may include names and work-related details.
Website Usage Data: We may collect information about your visit to our Website, such as your IP address, browser type, operating system, and pages visited. This is primarily collected through cookies, as detailed in our Cookies Policy.

4. Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing your personal data. The lawful bases we rely on are:

Performance of a Contract: Where we process your data to take steps at your request prior to entering into a contract (e.g., providing a quote via the Compliance Checker) or to fulfil our obligations under a service agreement with you.
Legitimate Interests: Where we have a legitimate business interest to process your data, such as responding to your enquiries, improving our services, or sending you relevant service-related communications. We will only rely on this basis where our interests are not overridden by your rights and freedoms.
Legal Obligation: Where we need to process your personal data to comply with a legal or regulatory obligation.
Consent: We do not generally rely on consent as a lawful basis for processing your data, except in relation to the use of non-essential cookies, as explained in our Cookies Policy.

5. Data Relating to Employees and Third Parties

If you provide us with personal data relating to your employees or other third parties (for example, when using the Compliance Checker or engaging our services), you warrant that you have the lawful authority to do so and that you have provided any necessary notices to the individuals concerned.

6. Data Retention

We will only retain your personal data for as long as is necessary to fulfil the purposes for which it was collected. Our retention periods are as follows:

Compliance Checker Data: Data submitted via the Compliance Checker is retained for a limited period to allow for follow-up and for our internal audit purposes, typically for 12-24 months, after which it is securely deleted.

Hearing Test Data: Data from hearing health surveillance is retained for a minimum of three years from the date of the last test, unless you instruct us otherwise in writing, to ensure continuity of records.

Client and Business Records: We retain client and financial records for as long as required to meet our legal and regulatory obligations, typically for six years after the end of our business relationship.

7. Sharing Your Personal Data

We do not sell your personal data. We may share your data with trusted third parties who act as our service providers and data processors, including:

Website Platform Providers: Our Website is hosted by Wix Studio, which may process data on our behalf.
IT and System Administration Providers: To support our business operations.

8. International Transfers

Some of our third-party service providers may be based outside the UK. Where we transfer your data to a country that is not deemed to provide an adequate level of data protection, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK's Information Commissioner's Office (ICO).

9. Data Security

We have implemented appropriate technical and organisational security measures to protect your personal data from being accidentally lost, used, or accessed in an unauthorised way. Access to your personal data is limited to those employees and third parties who have a business need to know.

10. Your Data Subject Rights

Under UK data protection law, you have the following rights in relation to your personal data:

Right of Access: To request a copy of the personal data we hold about you.
Right to Rectification: To request that we correct any inaccurate or incomplete data.
Right to Erasure: To request that we delete your personal data, under certain conditions.
Right to Restrict Processing: To request that we restrict the processing of your data, under certain conditions.
Right to Object to Processing: To object to our processing of your data, where we are relying on legitimate interests.
Right to Data Portability: To request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

If you wish to exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues (www.ico.org.uk).

11. Cookies

Our Website uses cookies. For detailed information on the cookies we use and the purposes for which we use them, please see our separate Cookies Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the date at the top of this policy will be revised. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us using the contact details provided on our Website.