Who we are
Data controller
Home Entertainment Hire ("we", "us", "our") is the data controller
for personal data collected through this website
(heh.co.im) and our hire booking process.
We are a family-run business based on the Isle of Man, delivering
entertainment equipment hire island-wide.
This policy is written to align with the UK General Data
Protection Regulation (UK GDPR), the Data Protection Act 2018,
and equivalent Isle of Man data protection standards.
What we collect
Personal data we process
When you submit a booking request on this website, we store a
full booking record in our private booking system. That record
includes:
- Booking reference and time of request
- Booking status (for example pending payment, confirmed, paid or cancelled)
- Your name, email address and phone number
- Delivery address and Isle of Man postcode
- Occasion / event type and any notes you provide
-
Hire details: package type, start date, number of nights,
collection date, and any optional extras you select
-
Estimated pricing we calculate (package + extras total) —
payment is arranged offline, not by card on this site
-
A note that payment is to be taken offline to secure the booking
-
Technical security data when you submit: your IP address and
browser user-agent string (used for spam/abuse prevention)
We also process short-lived security tokens and rate-limit
records (based on IP and email) so the booking form cannot be
easily abused. Those are not used for marketing.
On your own device, the booking form may store cart selections
and form draft details in browser local storage so you can
complete a request (see our
Cookie Policy).
We do not collect payment card numbers or other
card details through this website.
Why we use it
Purposes and lawful bases
We use your data to:
-
Handle booking requests - receive your request,
block the selected dates on our calendar, and manage the
booking through to confirmation or cancellation
(lawful basis: contract / steps prior to contract)
-
Contact you about your hire - by phone, email or
WhatsApp where appropriate, including to take payment offline
and arrange drop-off / collection
(lawful basis: contract)
-
Staff administration - authorised staff can view
and update bookings (status, details, dates) in a private
management tool
(lawful basis: contract and legitimate interests)
-
Run and secure the website - prevent spam, abuse
and fraud (rate limits, security tokens, IP/user-agent checks)
(lawful basis: legitimate interests)
-
Keep business records - accounts, insurance and
legal obligations
(lawful basis: legal obligation and/or legitimate interests)
We will not sell your personal data. We do not use your booking
data for unsolicited marketing unless you have asked us to stay
in touch for that purpose.
Sharing
Who we share data with
We only share personal data when necessary, for example with:
-
Our IT / website support (VG Digital Solutions)
for technical support and operational booking notifications,
under confidentiality obligations
-
Email and hosting providers that process data
on our behalf to run the site and deliver internal booking
alerts
-
Professional advisers or insurers where needed
for claims or legal advice
-
Authorities if required by law
When you submit a booking, an internal notification email with
your booking details is sent to
hello@heh.co.im and copied to
admin@vgdigitalsolutions.com for operations and
technical support. That email is for our business use only - it
is not a marketing message to you.
Transfers & storage
Where data is stored
Full booking records are stored in a private data file on our
web hosting account, kept outside the publicly browsable website
folder where possible, with access limited to the booking system
and authorised staff. Booking details are also held in our
business email when a request is submitted.
Authorised staff can view and update bookings through a private
password-protected management area of the website (not linked
from public pages and not intended for search engines).
If any provider stores data outside the UK/EEA, we will ensure
appropriate safeguards are in place (such as UK adequacy
regulations or standard contractual clauses) where required.
How long
Retention
-
Booking records: kept for as long as needed to
complete the hire and follow up, then for a reasonable
business/accounting period (typically up to 6 years for
completed hires where records are needed)
-
Calendar holds: requested dates stay blocked
on the public calendar until we confirm, cancel, mark paid or
otherwise update the booking status in our management tool
-
Security / rate-limit data: short-lived
(typically days), used only for abuse prevention
-
Browser cart / form draft data: on your device
only (see Cookie Policy); you can clear it anytime
Your rights
UK GDPR rights
You have the right to:
- Access your personal data
- Ask us to correct inaccurate data
- Ask us to erase data in certain circumstances
- Restrict or object to certain processing
- Data portability (where applicable)
- Withdraw consent where we rely on consent
To exercise your rights, email
hello@heh.co.im. We may need
to verify your identity before responding.
If you are unhappy with how we handle your data, you can contact
us first. You also have the right to complain to the relevant
supervisory authority. For UK GDPR matters this is the
Information Commissioner’s Office (ICO)
(ico.org.uk.
On the Isle of Man, the
Information Commissioner is the local authority
(inforights.im.
Security
How we protect data
We take appropriate technical and organisational measures to
protect personal data, including:
- Storing booking records in a private area of the hosting account (not meant to be publicly downloadable)
- Anti-abuse checks on the booking form (security tokens, rate limits, spam traps)
- Password protection for the staff booking manager
- Limiting who can access business email and the management tool
No method of transmission over the internet is completely
secure, but we work to keep your information safe.
Cookies
Cookies and similar technologies
We use a small amount of essential browser storage so the booking
form works. See our
Cookie Policy for details and your
choices.
Children
Children’s data
Our services are aimed at adults arranging hires (including for
children’s parties). We do not knowingly collect personal data
directly from children under 13 via this website. If you believe
we have, please contact us and we will delete it.
Updates
Changes to this policy
We may update this Privacy Policy from time to time. The
"Last updated" date at the top will change when we do.
Please check this page periodically.
Questions?
hello@heh.co.im
