Last updated: March 2nd, 2026
Effective date: March 2nd, 2026
Data Controller (for most purposes):
Hooftec Online Ltd
Email: [email protected]
Website: https://hooftec.app
"Hooftec", "we", "us", "our" means Hooftec Online Ltd, a company incorporated in England and Wales (company number [insert]), whose registered office is at [insert registered office address].
For personal data processed within customer accounts (e.g. farmers' clients, herd records), Hooftec acts as a Data Processor and the subscribing business is the Data Controller.
This Policy applies to:
It does not replace the customer's own privacy obligations where they act as controller of their own client data.
Payments are processed by a third-party payment provider (e.g., Stripe). We do not store full card details.
We may process:
When customers use the Service to record herd or business data, we process personal data such as:
In this context, we act solely as a Data Processor on the instructions of the subscribing business.
We rely on the following lawful bases under UK GDPR:
| Purpose | Lawful Basis |
|---|---|
| Account administration | Contract |
| Subscription billing | Contract |
| Service delivery | Contract |
| Security monitoring | Legitimate interests |
| Service improvement analytics | Legitimate interests |
| Legal compliance | Legal obligation |
| Direct B2B marketing | Legitimate interests (with opt-out) |
Where consent is required (e.g., optional analytics cookies), it will be obtained separately.
We use personal data to:
We do not sell personal data.
We share personal data only where necessary with trusted service providers, including:
All third-party processors are contractually required to implement appropriate safeguards.
We may also disclose data:
Where personal data is transferred outside the UK, we implement appropriate safeguards such as:
We retain personal data:
Customer account data will be deleted or anonymised upon request, subject to legal retention obligations.
Backups are overwritten in accordance with our standard retention cycle.
We implement appropriate technical and organisational measures including:
No system can guarantee absolute security.
Individuals have the following rights under UK GDPR:
Requests can be submitted to: [email protected]
We will respond within one month, subject to statutory extensions.
Where we act as Data Processor, requests relating to customer-managed data will be referred to the relevant business controller.
We may send B2B service communications based on legitimate interests.
You may opt out at any time using the unsubscribe link or by contacting us.
We do not conduct automated decision-making or profiling with legal or similarly significant effects.
Our website and application may use:
Where legally required, consent will be obtained via a cookie banner. Further details are provided in our Cookie Policy.
The Service is not intended for individuals under 18 years of age. We do not knowingly collect data relating to children.
We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification.
If you believe we have not handled your data correctly, you may contact us first.
You also have the right to lodge a complaint with:
This Privacy Policy does not form part of any contractual agreement except where expressly referenced in our Terms & Conditions.
