Last updated 23 July 2026
This policy explains what personal data Hoof & Honest collects when you visit hoofandhonest.com, why we collect it, how long we keep it, and the rights you have over it. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR).
Who is responsible for your data
The controller responsible for processing personal data on this website is the operator of Hoof & Honest. Full identifying and contact details of the controller are published separately on this site as required by law. You can also reach us through our contact page.
What we collect and why
Server log data
When you load any page, our hosting provider automatically records technical information sent by your browser. This typically includes your IP address, the date and time of the request, the page requested, the referring page, your browser type and version, and your operating system.
We process this on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in operating a secure, functioning website and in detecting and defending against attacks. Log data is retained only as long as needed for those purposes and is then deleted or anonymised.
Messages you send us
If you write to us through the contact form or by email, we process the name, email address and message content you provide, solely in order to read and answer you. The legal basis is your consent (Art. 6(1)(a) GDPR) and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
We keep correspondence for as long as the matter is live and for a reasonable period afterwards in case you follow up. You can ask us to delete it at any time, subject to any statutory retention obligations.
Comments
If commenting is enabled and you leave a comment, we store the comment text, the name and email address you supply, and your IP address. The IP address is retained to help us assess spam and abuse. Comments and their metadata may be retained indefinitely so that follow-up replies remain intelligible.
Security
This site runs a security plugin that inspects incoming requests and may log IP addresses and request details associated with suspicious activity. This is processed under our legitimate interest in protecting the site and its visitors from attack.
Cookies
Cookies are small files stored by your browser. We describe which cookies this site sets, what they do and how to control them in our Cookie Policy. Non-essential cookies are only set where you have given consent, and you may withdraw that consent at any time.
Embedded content from other sites
Articles on this site may embed video from YouTube or link to external websites. Embedded content behaves exactly as though you had visited that site directly: the third party may collect data about you, set its own cookies and track your interaction with the embed. We do not control that processing. YouTube is operated by Google, and its handling of your data is governed by Google’s own privacy policy.
Who we share data with
We do not sell your personal data and we do not share it for advertising purposes. Data may be handled on our behalf by service providers strictly necessary to run the site — principally our hosting provider, and any email or form-delivery service used to transmit your messages to us. Where such a provider processes personal data on our instructions, a data processing agreement under Art. 28 GDPR is in place.
Transfers outside the EEA
Some service providers may process data outside the European Economic Area. Where that happens, the transfer is safeguarded by an adequacy decision of the European Commission or by Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to:
- request access to the personal data we hold about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data erased (Art. 17)
- have processing restricted (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw consent at any time, without affecting processing carried out before withdrawal (Art. 7(3))
To exercise any of these, write to us via the contact page. You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or the place of the alleged infringement.
Children
This site is intended for a general adult audience. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as the site develops or as the law changes. The date at the top records the current version.