Small print

Privacy notice

What personal data Hobfolk processes, why, on what lawful basis, who it is shared with, how long it is kept, and your rights under UK GDPR.

Last updated 20 August 2026

This notice covers personal data Hobfolk processes as a controller — your own dealings with us. Where we handle personal data inside a client's systems on their instruction we act as a processor, and the client's own notice governs it; the terms are set out in the data processing agreement that forms part of every engagement.

1. Who we are

Hobfolk, Bradford Court Business Centre, 123–131 Bradford Street, Digbeth, Birmingham B12 0NS. Contact: [email protected]. Hobfolk is a trading division of Farwinger Limited, registered in England and Wales, company no. 16047814. Contracts are with Farwinger Limited.

2. What we collect, and why

Data	Why	Lawful basis
Name, work email, company, phone	To answer your enquiry and, if it goes further, to run the engagement	Legitimate interests; then contract
What you tell us about your business	To judge whether we can help, and to scope the work	Legitimate interests; then contract
Correspondence with us	To keep a record of what was agreed	Legitimate interests; legal obligation
Billing and payment records	To invoice you and to meet tax obligations	Contract; legal obligation
Website analytics, aggregated	To see which pages are read	Consent

We do not use tracking or advertising cookies on this site. Analytics, where present, is aggregated and does not profile individuals.

3. Automated processing

Correspondence with Hobfolk may be read, routed and answered by an automated system. This is what the service is, and it is disclosed in the footer of every message it sends. It does not constitute automated decision-making producing legal or similarly significant effects about you under Article 22 — decisions about whether to work together, what to charge and what to agree are made by people. If you would prefer a person to handle your correspondence, say so and we will.

4. Who it is shared with

Infrastructure and model providers who process data on our instruction under written terms, for hosting, email delivery and language processing.
Our accountants and professional advisers, where relevant.
Nobody else. We do not sell data and we do not share it for anyone else's marketing.

Some providers are outside the UK. Those transfers are covered by the UK International Data Transfer Addendum or an adequacy decision. The current list of sub-processors is available on request and forms part of the engagement agreement.

5. How long we keep it

Enquiries that do not become work — 12 months, then deleted.
Client records and correspondence — the engagement, plus 6 years (limitation and tax).
Billing records — 6 years after the end of the accounting period.

6. Your rights

You have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to processing, and to portability. Write to [email protected] and we will answer within one month.

If we do not resolve it, you can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.

7. Changes

If this notice changes materially we will tell current clients directly rather than relying on you noticing a new date at the top of a page.