Privacy policy

We collect only what we need to answer your enquiry and understand how the site is used. We never sell your personal data.

Last updated 8 October 2026

This privacy policy explains how Hatcha Limited (“Hatcha”, “we”, “us”) collects, uses and protects your personal data when you visit our website or get in touch with us. We handle your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy covers this website only. Work we do for clients is governed by separate written agreements.

1. Who we are

Hatcha Limited is a software engineering company based in the UK, and is the data controller responsible for your personal data.

  • Company: Hatcha Limited, registered in England and Wales, company number 14427711
  • Registered office: Unit D2A, Fairoaks Airport, Chobham, Surrey, GU24 8HU
  • Contact: hello@hatcha.com

2. The information we collect

Information you give us

When you use our contact form, you give us:

  • your name
  • your work email address
  • your company name (optional)
  • the type of project you’re interested in
  • a budget range (optional)
  • your message
  • how you heard about us (optional)

If you email us or book a call, we receive the details you choose to send. Please don’t include sensitive personal data, passwords or other credentials.

Information collected automatically

The site is hosted on AWS Amplify, a service of Amazon Web Services (AWS). Like most hosts, AWS keeps standard server and content delivery network logs, which include your IP address, browser type, the page requested and a timestamp.

If you accept analytics cookies, Google Analytics also collects information about how you use the site, as described in section 4.

When you send the contact form, it also tells us the page you were on before the form. Unless you have rejected analytics cookies or your browser sends a Global Privacy Control signal, it also includes the first page of your visit, the website that sent you to us and any campaign tags in the link you followed. We keep these in your browser’s session storage until you close the tab, and use them only to see how people find us. If you reject analytics cookies, we delete them straight away.

3. How we use your information and our lawful bases

  • To reply to your enquiry and discuss a project. Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to prospective clients.
  • To run and secure the site. Server logs and the contact form’s spam checks keep the site available and protect the form from abuse. Lawful basis: our legitimate interest in operating a secure website.
  • To understand how the site is used. Lawful basis: your consent, which you can withdraw at any time.
  • To meet legal obligations. Lawful basis: compliance with a legal obligation.

We don’t use your information for advertising and we don’t build advertising profiles.

4. Cookies and analytics

We use Google Analytics 4 only to see which pages are useful and how people find them. Its cookies are off unless you accept them in our cookie banner, and we have turned off Google signals and ad personalisation. If your browser sends a Global Privacy Control signal, analytics stays off.

You can change your choice at any time on our cookie policy page, which lists the cookies Google Analytics sets.

5. Who we share your information with

We don’t sell your personal data. We share it only with service providers that help us run the business, acting as our processors:

  • Amazon Web Services hosts the website and receives contact form submissions (AWS Lambda).
  • Resend delivers contact form submissions to our inbox by email.
  • Google provides our email (Google Workspace), the booking calendar used when you schedule a call, and, if you accept cookies, Google Analytics.

Some of these providers process data outside the UK, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or the UK Extension to the EU-US Data Privacy Framework. We may also disclose data where the law requires it.

6. How long we keep your information

We keep enquiry correspondence for as long as we need to respond to you and to manage any relationship that follows, and for a reasonable period afterwards in case of follow-up. Server logs are kept according to AWS’s standard retention settings. Analytics data is kept according to the retention settings we configure in Google Analytics. When personal data is no longer needed, we delete or anonymise it.

7. Your rights

Under UK data protection law, you have the right to:

  • access the personal data we hold about you
  • ask us to correct inaccurate or incomplete data
  • ask us to erase your data in certain circumstances
  • restrict or object to how we process your data
  • ask for data you’ve given us in a portable format
  • withdraw your consent at any time, where we rely on it

To use any of these rights, email hello@hatcha.com. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

8. Security

We use HTTPS across the site, least-privilege access controls and encryption at rest on AWS. No method of transmission over the internet is completely secure, so please avoid sending sensitive information through the contact form.

Our site links to websites we don’t control. We’re not responsible for their privacy practices or content, so please read their own privacy policies.

10. Children

Our website and services are aimed at businesses and aren’t directed at children. We don’t knowingly collect personal data from anyone under 16.

11. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with a new “last updated” date.

12. Contact us

If you have any questions about this policy or how we handle your data, email hello@hatcha.com. Related pages: our cookie policy, terms and conditions and accessibility statement.