Privacy policy

1. Who we are

Henry Vincent Moss (HVM) is operated by Vamberic Studio Ltd. Vamberic Studio Ltd is the controller responsible for personal information collected through h-v-m.agency and for deciding how that information is used.

For questions about this policy or to exercise your data protection rights, email henry@h-v-m.agency. Please identify your message as a privacy enquiry.

This policy covers this website and enquiries about HVM’s services. Processing carried out on behalf of clients as part of a marketing programme is addressed in the relevant engagement and data processing arrangements. The separate HVM Platform website has its own privacy information.

2. Information we collect

When you submit an enquiry, we collect the details requested by the form, such as your name, email address, company and message, and any optional information you choose to provide. The embedded form sends your answers to the Vamberic interaction service to handle your request.

We also receive information you choose to provide during subsequent correspondence. Please do not include sensitive personal information or information about other people unless it is necessary for your enquiry and you are entitled to share it.

Website and API infrastructure processes technical information needed to deliver and protect the service, which may include IP addresses, requested URLs, browser information, request times and error or security events.

If you use the website’s AI chat assistant, your messages and any contact details you choose to submit are sent to the Vamberic interaction service to generate responses and handle your request. The service also receives technical information needed to operate the widget. Please avoid entering sensitive personal information or confidential material into the chat. AI responses may be inaccurate; contact our team to confirm important information.

3. Why we use information and our lawful bases

• Responding to enquiries and discussing services. We rely on our legitimate interests in communicating with prospective customers and responding to requests. Where you personally ask us to take steps towards a contract with you, we may instead rely on taking those pre-contractual steps.
• Responding through the AI assistant. We rely on our legitimate interests in answering visitors’ questions and helping them contact the team. Messages are processed by the interaction service and its supporting AI service providers for this purpose.
• Managing business correspondence. We rely on our legitimate interests in maintaining appropriate records, providing consistent responses and managing business relationships.
• Understanding enquiry sources. We rely on our legitimate interests in understanding which communications bring relevant enquiries and improving our marketing.
• Operating and securing the website and enquiry service. We rely on our legitimate interests in delivering a reliable service, investigating faults and preventing misuse.
• Meeting legal requirements. Where we must keep or disclose information to comply with an applicable legal obligation, that obligation is our lawful basis.

Where we rely on legitimate interests, we consider whether those interests are outweighed by your rights and interests. Providing information is voluntary, but we may be unable to respond to an enquiry without suitable contact details and enough information to understand it.

Submitting the enquiry form does not subscribe you to a newsletter or give consent to unrelated marketing. Where consent is required for an additional use, we will seek it separately.

4. Cookies, tracking and analytics

Optional Vamberic visitor tracking and Ahrefs analytics are disabled until you select Accept optional. We rely on your consent for this optional analytics processing. We use it to understand website use and improve the relevance of our communications and website experience.

Vamberic receives page paths, page-view and engagement events, event identifiers, a tracking session and any applicable tracking-link reference, along with technical request information. If you start a chat or submit an enquiry while tracking is accepted, the interaction service can connect it with that browsing session. Ahrefs receives analytics information through its script to help us understand website visits and usage.

Your accepted or rejected choice is stored for the browser-tab session. If accepted, a Vamberic tracking session is also stored for that session. Use Cookie settings in the footer to withdraw consent by choosing Reject optional. This stops future tracking, clears the Vamberic tracking session and reloads the page to stop Ahrefs. It does not automatically delete information already collected or associated with a conversation. You can contact us about your data rights.

Rejecting optional analytics does not prevent use of the website, chat or enquiry form. The chat service still processes messages and details you submit to provide the requested conversation. The embedded enquiry form processes the answers you submit independently of your optional analytics choice.

See our cookie policy for the technologies, storage duration and choices available. Dismissing the notice does not grant consent.

5. Who receives information

Enquiries are submitted securely to our Vamberic enquiry service at api.vamberic.com. The website uses Amazon Web Services hosting and content delivery infrastructure. With your consent, optional analytics information is also processed by the Vamberic tracking service and Ahrefs.

Information may be accessible to authorised people handling enquiries and to service providers supporting hosting, security, enquiry management and business communications, to the extent needed for those purposes. Such providers must handle personal information under appropriate contractual and confidentiality arrangements.

We may also disclose information to professional advisers where necessary to obtain advice, or to authorities where disclosure is required by law or necessary to establish, exercise or defend legal claims.

6. Where information is stored

Enquiry data is stored in the European Union (EU). Storage location is distinct from the locations from which service providers may access or process information.

Where a service provider processes personal information outside the UK, we must ensure that any restricted transfer has an appropriate legal basis. Depending on the destination and arrangement, this may involve UK adequacy regulations or approved contractual safeguards, together with any additional measures required.

You can contact us to ask about the locations and safeguards relevant to your information and to request details of any applicable transfer safeguards.

7. How long we keep information

Our standard retention period for enquiries that do not lead to a client engagement is 12 months after our last meaningful contact with you. We then delete or anonymise the enquiry, unless a legal obligation or an ongoing complaint or legal claim requires us to retain relevant records for longer. If you become a client, records needed to manage that relationship are handled under the relevant engagement arrangements and applicable legal requirements.

Technical and security records are retained according to the operational or security purpose they serve. Where a legal obligation requires records to be kept, that requirement takes precedence. When information is no longer needed, we delete or anonymise it, subject to applicable backup and recovery arrangements.

8. Security and automated decisions

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss and misuse. Website and enquiry submissions use encrypted HTTPS connections. No internet service can guarantee absolute security.

The website enquiry form and chat assistant do not make decisions about you that produce legal or similarly significant effects. The chat assistant generates automated responses and may offer relevant information or an enquiry form. Descriptions of AI-powered services elsewhere on this website do not mean that those capabilities are automatically applied to every visitor or enquiry.

9. Your rights

Depending on the circumstances and the lawful basis for processing, UK data protection law gives you rights to request access to your personal information, correction of inaccurate information, deletion, restriction of processing and portability of certain information. These rights are subject to legal conditions and exceptions.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.

Email henry@h-v-m.agency to make a request. We may ask for information reasonably needed to confirm your identity. We will normally respond within one month, subject to any extension or other provision permitted by law. We do not normally charge a fee for exercising these rights.

10. Complaints

Please contact us if you are concerned about how we handle your information. You also have the right to complain to the UK Information Commissioner’s Office (ICO), without first raising the matter with us. Visit ico.org.uk/make-a-complaint for information about making a complaint.

11. Other websites and policy updates

Links to other websites do not bring those websites within this policy. Please read the privacy information provided by the operator of any website you visit.

We may update this policy when our practices or legal requirements change. The date at the top identifies the latest version. Where required, we will bring significant changes to your attention before using your information for a new purpose.