Privacy Policy

Halton Works AG ("Halton Works", "we", "us") provides done-for-you B2B outbound and meeting booking services from Manchester, United Kingdom. This policy explains how we handle personal data when you visit haltonworks.com, enquire about our services, or work with us as a client.

For privacy questions or requests, contact enquiry@haltonworks.com.

Depending on how you interact with us, we may collect:

• Enquiry and application data such as name, work email, company, role, website, and answers you submit through our contact or qualification forms (including forms hosted on Tally).
• Communications including email correspondence with our team and notes from discovery or onboarding calls.
• Client account data needed to deliver outbound on your behalf, such as ICP definitions, approved messaging, CRM fields, and calendar booking details.
• Prospect and lead data that you provide or that we process when running campaigns for you (for example business contact details of target accounts).
• Technical data such as IP address, browser type, device information, and usage data if analytics or similar tools are enabled on the website.

We use personal data to:

• Respond to enquiries and assess fit for our partner programme.
• Onboard clients, deliver outbound campaigns, and book qualified meetings on your calendar.
• Operate, secure, and improve our website and internal workflows.
• Meet legal, accounting, and regulatory obligations.
• Send service-related updates where you are an active client or have asked to hear from us.

We do not sell personal data.

Where UK GDPR applies, we rely on one or more of the following lawful bases:

• Contract to perform our services or take steps at your request before entering a contract.
• Legitimate interests to operate and grow our business, secure our systems, and run proportionate B2B outreach, balanced against your rights.
• Consent where required, for example certain marketing cookies or optional communications.
• Legal obligation where we must retain or disclose information by law.

When you engage Halton Works, we often act under your direction to contact business prospects on your behalf. You are responsible for ensuring you have an appropriate lawful basis and that your lists, offers, and instructions comply with applicable law (including UK GDPR, PECR, and CAN-SPAM where relevant).

Where we process prospect data only to deliver your campaign, we typically act as a processor and will handle that data according to our client agreement and your documented instructions.

We may share data with trusted providers who help us run the business, such as:

• Form providers (for example Tally) for applications and enquiries.
• Email, calendar, CRM, and infrastructure tools used to deliver outbound.
• Hosting, analytics, or security vendors where enabled on the site.
• Professional advisers (legal, accounting) when required.

We require appropriate safeguards from processors and only share what is needed for the stated purpose.

We keep personal data only as long as needed for the purposes above, including active client relationships, dispute resolution, and legal retention periods. Enquiry data that does not progress to a client engagement is routinely reviewed and deleted or anonymised when no longer needed.

We apply reasonable technical and organisational measures to protect personal data, including access controls and least-privilege practices for client workspaces. No online service can be guaranteed completely secure; please use strong credentials and notify us promptly of any suspected incident.

If UK GDPR applies, you may have rights to access, rectify, erase, restrict processing, object, and data portability, and to withdraw consent where processing is consent-based. You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise your rights, email enquiry@haltonworks.com. We may need to verify your identity before responding.

Our operations are based in the United Kingdom. If we transfer personal data outside the UK, we use appropriate safeguards such as UK International Data Transfer Agreements or adequacy regulations, unless an exemption applies.

We may update this policy from time to time. The "Last updated" date at the top of the page will change when we do. Material changes for active clients will be communicated where appropriate.