Privacy Policy

What we collect when you enquire, buy or browse — why we collect it, who else sees it, and how to tell us to stop.

Last updated 28 August 2026

Who we are

HFM provides cleaning, maintenance, workwear and security services to organisations across the UK. When you enquire with us, buy workwear from us or simply browse this website, we are the data controller for the personal information involved — we decide what is collected and why.

Harrison Facilities Management Group Limited is registered in England and Wales under company number 09321628, with its registered office at 32 Friar Gate, Derby, DE1 1BX.

This policy explains what we collect, why, who we share it with and what you can ask us to do about it. If anything here is unclear, email us at russell@harrisonfm.co.uk and we will explain it properly.

What we collect

When you send us an enquiry

Our contact form asks for your name, email address, phone number, company, the services you are interested in, how many sites you have, your postcode, your preferred start date and whatever you write in the message box. Only the fields marked as required are needed — the rest help us quote accurately.

When you open a trade account

Signing up gives us your name, email address, company details and a password, which is stored encrypted and is never visible to us. Accounts are approved manually before they can be used.

When you order workwear

We collect your delivery and billing address, the items ordered and any personalisation details such as names or logos to be embroidered. Payment is handled by our payment provider — your full card number never reaches our systems.

Automatically, as you browse

Our hosting provider records the usual technical information every website receives: your IP address, browser type, the pages you visited and when. Beyond that, we only collect what you have agreed to under cookies.

Why we use it, and our lawful basis

UK GDPR requires us to have a specific reason — a lawful basis — for every use of your data. Ours are:

  • To answer your enquiry and quote for work. Our legitimate interest in responding to businesses who approach us, and taking steps to enter a contract with you.
  • To deliver services and fulfil orders. Performance of our contract with you.
  • To keep records for tax, insurance and health and safety. Our legal obligations.
  • To measure our advertising and improve the site. Your consent, which you give or withhold through the cookie banner and can change at any time.

We do not sell your personal data, and we do not use it to make automated decisions about you.

Cookies and similar technologies

Cookies are small files stored on your device. We use essential ones to run the site — signing you in, remembering your basket, remembering this choice — and these cannot be switched off because the site would not work without them.

Everything else is optional and off until you turn it on. Advertising cookies from Google and LinkedIn do not load, and set nothing on your device, unless you accept them. Rejecting them is as easy as accepting, and you can change your mind whenever you like.

CookieSet byWhat it doesTypeExpires
hfm_tokenHFMKeeps you signed in to your trade account.Essential7 days
hfm-cookie-consentHFMRemembers the choice you made here, so we stop asking.Essential6 months (stored in your browser, not a cookie)
_gcl_au, _gcl_awGoogle AdsTells us which advert or search brought you to us and whether it led to an enquiry.AdvertisingUp to 90 days
bcookie, lidc, li_sugr, UserMatchHistoryLinkedInMeasures our LinkedIn campaigns and lets us show ads to similar businesses.AdvertisingUp to 12 months
woocommerce_*, wp_woocommerce_session_*WooCommerceRemembers your basket and checkout progress in the workwear store.EssentialSession to 2 days

You can also clear or block cookies in your browser settings, though doing so may stop parts of the site working.

Who we share it with

We share personal data only where we need to, and only with organisations bound to protect it:

  • Google Ireland Ltd. Google Ads conversion measurement, only if you accept advertising cookies.
  • LinkedIn Ireland Unlimited Company. Campaign measurement, only if you accept advertising cookies.
  • Our email and hosting providers. Delivering enquiry emails and running this website.
  • Our payment provider. Taking payment for workwear orders. We never see or store your full card details.
  • Professional advisers and insurers. Where we are required to, for legal or accounting reasons.

Some of these providers process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or the International Data Transfer Agreement, so your data keeps the same protection it has here.

How long we keep it

We keep personal data only as long as we need it, then delete it securely.

Enquiries that do not become contracts12 months from your last contact with us
Customer records and contracts6 years after the contract ends, for tax and legal reasons
Workwear orders and payment records6 years, as required by HMRC
Website accountsUntil you ask us to close the account, then 30 days
Your cookie choice6 months, after which we ask again

Your rights

Under UK GDPR you can ask us to do any of the following, free of charge, and we will respond within one month:

  • See a copy of the personal data we hold about you.
  • Correct anything that is wrong or incomplete.
  • Delete your data, where we have no continuing reason to keep it.
  • Restrict or object to how we use it, including for marketing.
  • Receive your data in a portable format, or have it sent to someone else.
  • Withdraw consent at any time, without affecting what came before.

To exercise any of these, email russell@harrisonfm.co.uk or write to us at 32 Friar Gate, Derby, DE1 1BX.

Complaints

If you are unhappy with how we have handled your data, tell us first at russell@harrisonfm.co.uk and we will try to put it right.

You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk or on 0303 123 1113.

Changes to this policy

When we change how we handle personal data, we update this page and change the date at the top. If the change is significant — a new use of your data, or a new cookie — we ask for your cookie choice again rather than assuming the old answer still stands.

Contact us

Questions about this policy, or about the data we hold on you:

Email: russell@harrisonfm.co.uk

Phone: 0345 565 1643

Post: 32 Friar Gate, Derby, DE1 1BX