Privacy Policy and GDPR Compliance

Here at Hi-Fu, we take your privacy seriously and will only use your personal information to administer your account.

Forms

Contact form When you fill out our contact form or general enquiry/ support question we collect your First Name, Last Name and your email address to be able to communicate with you.

Your data will only be kept in this website’s database. We don't have duplicates of them. We are GDPR certified/compliant with our web host and it is all safe. For more details, please visit https://borehamwood.hi-fu.co.uk/privacy-policy/

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string.

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. You can read the Gravatar service privacy policy here: https://automattic.com/privacy/. Your profile picture will be visible to the public when you make a comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. What data we collect and store Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. The only cookie this site will ever set on your browser is a simple session cookie, and it remains active only as long as your current browsing session.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. If you select “Remember Me”, your login will persist for two days. If you check “Remember Me”, your login will persist for two weeks. Logging out of your account will remove the login cookies.

Embedded content from other websites

This includes, but is not limited to: articles, images, and videos (embedded content). Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other

Google Analytics

We use Google Analytics to understand who comes to the site.

This data is used in the Google Analytics system, accessed via cookies.

Google has updated its terms of service in accordance with new data processing requirements for the GDPR.

The information we gather will be anonymous and “Data sharing” has been disabled.

We do not combine the information generated through the use of Google Analytics cookies with any personally identifiable information from other Google services.

Freedom of Information request

Here is everything you will find on our website. Please choose the relevant data that you would like the site owner to anonymise so it cannot be linked to your email address any longer. It is up to the site owner to make changes at your request. Once your data is anonymised, you will be sent an email confirmation.

Table of Requests & Data Subject Rights

Right to Erasure Requests.

You (the data subject) can request a deletion on the website.

When a submission is requested the subject will get an email confirmation. It will prompt the deletion command.

Once email is confirmed, the user request gets added to requests table which will reviewed by Admins.

If the Subject has any content published in the website for some reason, ( post types / comments.

If they have no content,you will get a Deletion request confirmation and you will get a six digit Token for preserving if you need to restore data or undo the erasure.

The administrator can reassign (or delete) all the content on the requests table.

If necessary, in a comments scenario it might be obfuscated (with the Carnival’s content).

Admin is able to add users manually in the table with the erasure requests by use of a manual email search.

Right to Access Data Request & User Data Portability

The Data Subject can request for a copy of their data to be downloaded.

Once the user has requested their data, they will receive a double opt-in confirmation email; after which an XML or JSON file will be created by the plugin and sent to them via email with a link that expires in 48 hours.

Right to Access Data Request & User Data Portability, Deletion and Pass-Through.

User has the right to request his data download.

Once the user has requested for their data, they will receive a double opt-in confirmation email and then plugin creates an XML or JSON file in seconds and automatically sends it to the user by e-mail with a link which will expire after 48 hours.

Right to rectification & Complaints right

The Data Subject has a right to have their data corrected.

The user will receive a confirmation double-opt-in email after making their request and be added to the table accordingly for admin approval.

Email Marketing

We keep you informed, too, via email marketing and newsletters.

Every one of our mailshots are completely GDPR Compliant and will have an opt-out inclusion if in the event you do not wish to continue to receive.

For our email marketing, we keep it to the bare minimum: your name and email address.

© Copyright 2025 hi-fu.co.uk All Rights Reserved