Privacy Policy
A Legal Disclaimer
This Privacy Policy outlines how Hollan Hallrow Private Limited (“Hollan Hallrow”, “we”, “our”, or “us”) collects, uses, stores, and protects data obtained through our website, applications, communications, or services. This policy is designed to comply with the most stringent data privacy laws globally and applies to all users interacting with us.
By accessing our services, you consent to the terms outlined in this policy. If you do not agree, please do not use our services.
Effective Date: 20th June 2025
International Privacy Law Compliance
Hollan Hallrow adheres to the highest global standards of data protection. The following outlines how we comply with major regional laws:
General Data Protection Regulation (GDPR) – European Union
We rely on lawful bases for processing (consent, contract, legal obligation, or legitimate interest). EU residents may exercise their rights to access, correct, erase, restrict, or port personal data. Data transfers from the EU are protected by Standard Contractual Clauses (SCCs).
California Consumer Privacy Act (CCPA) & California Privacy Rights Act (CPRA) – United States
We provide California residents with the right to access, delete, or correct their personal information. We do not sell personal data. We honor Global Privacy Control (GPC) signals.
Personal Information Protection and Electronic Documents Act (PIPEDA) – Canada
We collect personal information with consent and provide access, correction, and challenge rights. All handling follows the ten privacy principles set by PIPEDA.
Privacy Act 1988 – Australia
We comply with the Australian Privacy Principles (APPs). Personal data is collected lawfully, used fairly, and protected from misuse. We notify individuals of data collection and offer correction rights.
Digital Personal Data Protection Act, 2023 – India
We process Indian personal data with affirmative consent. Data principals may access, update, delete, or withdraw consent. We ensure secure processing, appoint a grievance officer, and notify data breaches to the Data Protection Board of India.
Middle East, GCC, and South Africa
We comply with regional laws such as the UAE DIFC Law, Bahrain PDPL, and South Africa’s POPIA. Data is collected with consent, limited to purpose, and securely handled with access and opt-out rights.
Southeast Asia & Oceania
We comply with Singapore’s PDPA, Malaysia’s PDPA, New Zealand’s Privacy Act, and similar laws in Southeast Asia and Oceanic nations. Data is used with consent, retained appropriately, and rights to access or correction are respected.
Brazil – Lei Geral de Proteção de Dados (LGPD)
We process data lawfully and transparently, with clear purpose notification. Individuals may access, correct, anonymize, or delete their data. Consent withdrawal is supported.
Switzerland, Russia, Scandinavia, Africa, Central & Latin America
We follow GDPR-equivalent principles where national frameworks are lacking. These include fairness, purpose limitation, transparency, encryption, access rights, and secure transfer protocols.
What to Include in the Privacy Policy
1. Scope of Policy
This policy applies to all users of our:
-
Website: www.hollanhallrow.com
-
Contact forms, newsletters, and downloads
-
Email communications
-
Analytics and CRM tools
-
Brand engagement via sourcing platforms and trade networks
It applies to clients, prospects, institutional buyers, vendors, partners, government agencies, analysts, and researchers.
2. Information We Collect
Personal Data
-
Full name
-
Company and designation
-
Email address, phone number
-
IP address and geolocation
-
Any other information voluntarily provided
Non-Personal Data
-
Device type, browser version, OS
-
Pages visited and time spent
-
Traffic source and session analytics
-
Cookie identifiers and anonymised tracking data
3. How We Collect Data
-
Website forms and live chat
-
Email inquiries and business communication
-
Cookies, pixels, and tags
-
Google Analytics, LinkedIn Insights, Meta Business tools
-
Public directories and business platforms
4. How We Use Your Information
-
Respond to enquiries and RFQs
-
Verify buyer and vendor credentials
-
Maintain business records and trade documentation
-
Ensure website functionality and user analytics
-
Comply with regulatory, customs, and tax obligations
-
Prevent fraud and unauthorized access
5. Legal Basis for Processing
Depending on jurisdiction, we process data under:
-
Consent (opt-in forms, cookies)
-
Contractual necessity (quote requests, supplier forms)
-
Legal obligation (export compliance, taxation)
-
Legitimate interest (B2B analytics, security)
6. Data Sharing and Disclosure
We do not sell, rent, or lease personal data.
We may share information with:
-
Hosting providers, analytics platforms
-
Freight and logistics partners
-
Third-party contractors under NDAs
-
Regulatory authorities or courts (if legally compelled)
-
Creative or marketing partners (anonymised where appropriate)
7. Cookies and Tracking
Cookies help us enhance your experience. We use them to:
-
Remember form entries
-
Analyse website usage
-
Improve performance and personalization
Users can disable cookies via browser settings. Cookie notices are displayed to EU/UK/California users as required.
8. International Data Transfers
We transfer and store data securely in data centers in the EU, US, Singapore, and other compliant jurisdictions. Transfers are governed by SCCs and encrypted transit protocols.
9. Data Retention
We retain personal data:
-
For a maximum of 10 years for trade, tax, and legal records
-
For 26 months in analytics tools
-
Until deletion is requested, unless legal exceptions apply
10. Children’s Data
We do not knowingly collect data from individuals under 18. If we become aware of such data, it will be promptly deleted.
11. Media and Content Usage
All visuals used on our website are:
-
Custom-created by our design partners
-
Licensed under commercial agreements from platforms such as Unsplash, Adobe Stock, Envato, Pexels
-
In compliance with copyright and fair usage policies
Any concerns may be sent to privacy@hollanhallrow.com for prompt action.
12. Your Rights
Depending on your country, you may:
-
Access, update, or delete your personal data
-
Object to processing or withdraw consent
-
File a complaint with your national data authority
-
Request portability of your information
To exercise your rights, contact privacy@hollanhallrow.com.
13. Security Practices
We maintain data security via:
-
SSL/HTTPS encryption
-
Multi-factor authentication
-
Firewalled servers
-
Role-based access control
-
Periodic system audits