Privacy Policy
Last updated: 15 February 2026
Hartz AI is a trading name of The Hartz Company Limited, a company registered in England and Wales (company number 03848015). Our registered address is Wohl Enterprise Hub, 2b Redbourne Avenue, London N3 2BS, United Kingdom.
We (“we”, “us”, “our”) are committed to protecting your privacy. This privacy policy explains how we collect, use, store and protect your personal data when you use our website at www.hartzai.com. We are the data controller for the personal data we process through this website.
What data we collect
We collect personal data only when you voluntarily provide it through our website. This includes:
- Contact form submissions - your name, email address, and any message you send us
- Discovery call bookings - your name, email address, and preferred appointment time
- Email correspondence - any personal data you share when emailing us directly
We do not collect sensitive personal data, financial information, or data from children.
How we use your data
We use your personal data for the following purposes:
- To respond to your enquiries and contact form submissions
- To arrange and conduct discovery calls
- To provide the services you have requested
- To send follow-up communications that you have consented to
Our legal basis for processing your data is your consent (when you submit a form or contact us) and our legitimate interest in responding to business enquiries.
Cookies and tracking technologies
Our website uses cookies and similar tracking technologies to analyse site traffic, measure advertising effectiveness, and build remarketing audiences. We categorise these into three groups:
Essential cookies
These are strictly necessary for the site to function correctly. They include your cookie consent preference (hartz_consent) which is stored for 365 days. Essential cookies do not require your consent under the Privacy and Electronic Communications Regulations (PECR).
Analytics cookies
These help us understand how visitors use our site. They are only set after you give explicit consent via the cookie banner.
- Google Analytics 4 (GA4) - measures page views, scroll depth, outbound clicks, site search, and file downloads. Data is retained for 14 months. Opt out of Google Analytics (opens in a new tab).
- Google Tag Manager (GTM) - manages the loading of analytics and marketing tags. GTM itself does not collect personal data but coordinates the other technologies listed here.
Marketing and remarketing cookies
These are used for targeted advertising and audience building. They are only set after you give explicit consent via the cookie banner.
- Google Ads remarketing - builds audiences for Google Search and Display advertising based on pages you visit. Manage your Google ad settings (opens in a new tab).
- Meta Pixel (Facebook/Instagram) - tracks page views and conversion events for Meta advertising platforms. Manage your Meta ad preferences (opens in a new tab).
- LinkedIn Insight Tag - tracks page views and conversions for LinkedIn advertising. Manage your LinkedIn ad settings (opens in a new tab).
- Microsoft UET Tag (Bing Ads) - tracks page views and conversions for Microsoft Advertising. Opt out of Microsoft Advertising cookies (opens in a new tab).
Cookie consent and how to change your preferences
When you first visit our website, a cookie consent banner appears asking you to accept or reject non-essential cookies. You can choose to accept all, reject all, or manage your preferences by category (analytics and marketing separately).
No analytics or marketing cookies are set until you give explicit consent. We use Google Consent Mode v2 to ensure all tracking technologies respect your choice.
To change your preferences at any time, clear the hartz_consent cookie from your browser settings and the consent banner will reappear on your next visit.
Server-side processing
Some tracking data is processed server-side through a service called Stape, which hosts a Google Tag Manager server container on our behalf. This means certain analytics and advertising requests are routed through our own domain before reaching the respective platforms. Stape acts as a data processor under our instruction and does not use your data for any other purpose. Stape's privacy policy is available at stape.io/privacy-policy (opens in a new tab).
Third-party services
We use the following third-party services that may process data on our behalf:
- Vercel - website hosting and deployment (United States)
- Sanity CMS - content management system (EU/United States)
- Calendly or similar - booking and scheduling for discovery calls (United States)
- Google - analytics (GA4), tag management (GTM), and advertising (Google Ads) (United States)
- Meta Platforms - advertising via Facebook and Instagram (United States)
- LinkedIn (Microsoft) - advertising via LinkedIn Insight Tag (United States)
- Microsoft - advertising via Bing Ads / UET Tag (United States)
- Stape - server-side tag management hosting (EU)
Each of these services has its own privacy policy and data protection measures. We only share the minimum data necessary for these services to function. Analytics and advertising services only receive data when you have given consent via our cookie banner.
International data transfers
Some of the third-party services listed above are based outside the United Kingdom. This means your personal data may be transferred to, stored, or processed in countries outside the UK, including the United States.
Where your data is transferred outside the UK, we ensure that appropriate safeguards are in place to protect it, in accordance with UK GDPR. These safeguards may include:
- Transfers to countries that the UK Secretary of State has determined provide an adequate level of data protection
- Use of Standard Contractual Clauses (SCCs) approved for UK international transfers, also known as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs
- Reliance on the service provider's binding corporate rules or other approved transfer mechanisms
If you would like more information about the specific safeguards applied to any international transfer of your data, please contact us at craig@hartzai.com.
Data retention
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected. Contact form submissions and correspondence are retained for up to 24 months from the date of your last interaction with us, after which they are securely deleted.
Your rights under UK GDPR
Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:
- Right of access - you can request a copy of the personal data we hold about you
- Right to rectification - you can ask us to correct any inaccurate data
- Right to erasure - you can request that we delete your personal data
- Right to restrict processing - you can ask us to limit how we use your data
- Right to data portability - you can request your data in a machine-readable format
- Right to object - you can object to our processing of your data
- Right to lodge a complaint - you have the right to complain to the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached
To exercise any of these rights, please contact us at craig@hartzai.com. We will respond to your request within 30 days.
Complaints to the ICO
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first if possible.
How to request data deletion
If you would like us to delete all personal data we hold about you, please email craig@hartzai.com with the subject line “Data Deletion Request”. We will confirm deletion within 30 days and notify you once the process is complete.
Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.
Contact us
If you have any questions about this privacy policy or how we handle your data, please contact us: