← Back to hestora.net

Privacy Policy

Last updated: August 2026

This Privacy Policy explains how Hestora Limited ("Hestora", "we", "us") collects, uses and protects your personal information when you use our website (hestora.net) and register your interest with us. We are committed to protecting your privacy and handling your data in line with the UK GDPR and the Data Protection Act 2018.

Who we are

Hestora Limited is a company registered in England & Wales (Company No. 16856062). We are the "data controller" responsible for your personal data.

What information we collect

We only collect information you choose to give us. When you complete our "Register your interest" form, ask us for one of our published documents, or contact us by email, we may collect:

We ask for a name and email address before sending a document so that we can send it to you, answer any questions it raises, and understand which topics our readers care about. Ticking the "keep me updated" box on that form is entirely optional and is never a condition of receiving the document — if you leave it unticked we will not add you to our updates.

You only need to give those details once. Your browser remembers them on your device so that later documents open straight away, and each one you open is added to your record so we can see which documents have been useful to you. We do not ask again unless you clear your browsing data or use the Sign out button on that page to sign in with different details. See our Cookie Policy for what is stored on your device.

We also collect limited technical information automatically through cookies — see our Cookie Policy.

How we use your information

We use your information to:

Our legal basis

We rely on your consent when you submit the register-interest form and ask us to keep you updated, and on our legitimate interests in responding to your enquiry and developing our products. You can withdraw consent at any time (see "Your rights" below).

Who we share it with

We do not sell your personal data. We share it only with trusted service providers who help us run the business, and only as needed:

Where your data is held

Your form submissions are held within the UK/EEA. Some of our service providers — Netlify, Cloudflare and Microsoft — are US-based and operate global networks, so limited technical or analytics data may be processed outside the UK. Where that happens we rely on the UK's international data transfer safeguards (the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework) to keep your data protected to UK standards.

Embedded content

Our site includes an explainer video and an embedded contact form. These may load content from, or set cookies via, third parties. See our Cookie Policy for details.

How long we keep it

We keep your information only for as long as needed to keep you updated and to run our pilot and rollout, after which it is securely deleted or anonymised. You can ask us to delete your data sooner at any time.

Your rights

Under UK data-protection law you have the right to: access the personal data we hold about you; ask us to correct or delete it; object to or restrict how we use it; withdraw consent; and request a copy of your data in a portable format. To exercise any of these, email hello@hestora.net.

If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed.

Contact us

Questions about this policy or your data? Email us at hello@hestora.net.