Privacy Policy
1. Introduction
Please read this Privacy Policy carefully as it contains important information on who we are and how and why we collect, store, use and share personal information when you visit our marketing website at harkerapp.com or contact us.
It also explains your rights in relation to your personal information and how to contact us or a supervisory authority if you have a complaint.
2. Who We Are
Harker Technologies Limited (“we”, “our”, “us”, “the Company”) is the controller of the personal information described in this policy.
We are a company registered in England and Wales under company number 15131357, with our registered office at Innovation Centre, 131 Mount Pleasant, Liverpool, L3 5TF, United Kingdom..
We are registered with the Information Commissioner’s Office under registration number ZB744738.
We have appointed a Data Protection Officer. Their contact details are in section 17 below.
3. Scope of this Policy
This policy relates only to your use of our marketing website at harkerapp.com and to any contact you have with us by email or telephone as a visitor to that website.
It does not cover:
• The Harker application at app.harkerapp.com. If you are a user of the Harker application, the handling of your personal information is described in the privacy information provided to you within the application and governed by the agreement between us and the organisation that gave you your account.
• Information about people supported by our customers. Where our customers record information about the people they support in the Harker application, we handle that information as a processor acting on our customer’s instructions, under a written data processing agreement. Our customer, not Harker, is the controller of that information. If you are a person supported by one of our customers and you have a question about your information, please contact that organisation directly, or contact us and we will help you reach them.
• Other Harker websites and subdomains, some of which are operated by trusted third parties under their own policies.
4. The Personal Information We Collect
4.1 Information you give us
Our marketing website contains no forms, sign-up boxes or other means of submitting information to us. The only way to contact us through the site is by using one of the email links published on it.
If you email us at hello@harkerapp.com, press@harkerapp.com, dpo@harkerapp.com or any other address published on our website, or if you call us, we will collect:
• your name and the email address or telephone number you contact us from;
• the organisation you work for and your role, if you tell us;
• the content of your message and any information you choose to include in it, together with our reply and any subsequent correspondence.
Please do not send us sensitive personal information about yourself or about anyone else by email, including information about a person supported by one of our customers. Email is not a secure channel. If you need to share sensitive information with us, contact us first and we will agree a secure method.
4.2 Recruitment
Job vacancies are advertised on a third-party site (harkerapp.notion.site) operated by Notion Labs, Inc. Visiting that site is subject to Notion’s own privacy policy.
If you apply to work with us, we will collect the information in your application, CV and covering letter, and any notes we make during the recruitment process.
4.3 Events and webinars
Where we run a webinar or online event, registration is handled by Microsoft Teams. The information you provide when you register is shared with us and is also processed by Microsoft under its own privacy statement.
4.4 Information we collect automatically
Our website is built and hosted on the Framer platform. When you visit a page, Framer processes the following technical information on our behalf in order to deliver the page to you, keep the site secure and provide us with aggregated audience statistics:
• your IP address; • the type of device, browser and operating system you are using; • the pages you view, the date and time of your visit, and how long you spend on the site; • the website or link that referred you to us; • an approximate location (usually country or city level) derived from your IP address.
The analytics we receive from Framer are cookieless and aggregated. We see counts and trends - how many people visited a page, which pages are popular, which sites refer traffic to us - not the browsing activity of identifiable individuals. Framer does not set any cookies on our marketing website and we do not use any third-party analytics, advertising or tracking services on it.
We do not build profiles of website visitors, and we do not combine website analytics with information you send us by email.
5. Cookies
Our marketing website does not use any cookies, and does not store any information in your browser’s local or session storage.
Our Cookies Policy explains the cookies used in the Harker application at app.harkerapp.com, and how to control them. You can read it on our cookies page.
6. How and Why We Use Your Personal Information
We must have a lawful basis for using your personal information. We use it as follows:
What we use it for
Our lawful basis
Responding to your enquiry, press request or other correspondence, and keeping a record of it
Our legitimate interests - to answer questions about our work and manage our relationships. Where your enquiry is about becoming a customer, taking steps at your request before entering into a contract
Delivering our website to your device and keeping it available, functioning and secure
Our legitimate interests - to run a safe and reliable website
Understanding, in aggregate, how our website is used so we can improve it and our content
Our legitimate interests - to improve our website and communications
Assessing your application and communicating with you about a role
Taking steps at your request before entering into a contract, and our legitimate interests in recruiting suitable people
Registering you for, and running, an event or webinar you have signed up to
Taking steps at your request, and our legitimate interests in engaging with our sector
Sending you marketing about Harker where you have asked us to, or where you are an existing customer contact and the message relates to similar services
Your consent, or our legitimate interests in promoting our services (see section 12)
Complying with our legal and regulatory obligations, and establishing, exercising or defending legal claims
Compliance with a legal obligation, and our legitimate interests in protecting our position
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms, and we are satisfied that they are not. You have the right to object - see section 10.
We do not collect special category data (such as health, ethnicity or religious belief) through our marketing website, and we ask you not to send it to us by email.
7. Who We Share Your Personal Information With
We do not sell your personal information, and we do not share it for advertising purposes.
We share personal information with:
• Framer B.V., which hosts our marketing website and provides its aggregated analytics, acting as our processor;
• Bird, which provides our business email service, acting as our processor;
• Microsoft, where you register for a webinar or event we run using Microsoft Teams;
• Notion Labs, Inc., if you view our vacancies on our Notion careers site;
• our professional advisers, such as lawyers and accountants, where necessary and in confidence;
• regulators, law enforcement and other authorities, where we are required to do so by law or where it is necessary to protect our rights or the rights of others;
• a purchaser or successor, if we sell or restructure our business, in which case we will tell you before your information becomes subject to a different privacy policy.
We require all our processors to keep personal information secure, to use it only on our instructions, and not to use it for their own purposes.
Our website links to other websites, including our social media pages and third-party sites we reference in our reports and blog. We do not embed tracking content from those services on our site, but once you follow a link, that website’s own privacy policy applies. We are not responsible for the content or privacy practices of other websites.
8. Where We Store Your Personal Information
Personal information collected through our marketing website is stored on servers in the United Kingdom or the European Economic Area wherever possible.
Some of our suppliers, including Microsoft and Notion, are based outside the UK or process personal information outside the UK. Where personal information is transferred outside the UK, we make sure an appropriate safeguard is in place, which will be one of the following:
• the country has been assessed by the UK government as providing an adequate level of protection (which includes countries in the European Economic Area);
• the transfer is made under the UK International Data Transfer Agreement, or the UK Addendum to the European Commission’s standard contractual clauses;
• the recipient is certified under the UK Extension to the EU-US Data Privacy Framework.
You can ask us for more information about the safeguards we use, or for a copy of them, using the contact details in section 17.
9. How Long We Keep Your Personal Information
We keep your personal information only for as long as we need it for the purposes described in this policy, and to meet our legal and regulatory obligations.
In general:
• Enquiries and correspondence - 24 months from our last contact with you, unless the enquiry leads to a contract, in which case we keep it for the duration of the contract and for 6 years afterwards;
• Recruitment records for unsuccessful applicants - 6 months after we tell you the outcome, unless you ask us to keep them longer so we can consider you for future roles;
• Event and webinar registrations - 12 months after the event;
• Website analytics - retained by Framer in aggregated form according to their retention schedule; these statistics do not identify you.
At the end of the retention period we securely delete or anonymise the information. Where deletion is not immediately possible (for example, information held in backups), we isolate it and protect it until deletion is possible.
10. Your Rights
Under data protection law you have the following rights. They are not absolute and do not apply in every case.
• Access - to be told whether we hold personal information about you and to receive a copy of it.
• Rectification - to have inaccurate personal information corrected and incomplete information completed.
• Erasure - to have your personal information deleted, in certain circumstances.
• Restriction - to ask us to limit how we use your personal information, in certain circumstances.
• Portability - to receive certain personal information in a structured, commonly used, machine-readable format, and to have it transmitted to another controller.
• Objection - to object to our use of your personal information where we rely on legitimate interests. You can object to direct marketing at any time and we will always stop.
• Withdraw consent - where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of what we did before you withdrew it.
• Not to be subject to automated decision-making - we do not make decisions about you by automated means (see section 14).
To exercise any of these rights, contact us using the details in section 17. We will respond within one month. If your request is complex, we may extend this by up to two further months, and we will tell you if we do.
We do not charge a fee for exercising your rights, unless your request is manifestly unfounded or excessive. We may need to ask you for information to confirm your identity before we act on a request.
11. Keeping Your Information Secure
We have appropriate technical and organisational measures in place to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include encryption of information in transit and at rest, access controls limiting who can see personal information, multi-factor authentication on our business systems, and staff training.
We have procedures for dealing with suspected personal data breaches, and we will notify you and any applicable regulator where we are legally required to do so.
No transmission of information over the internet can be guaranteed to be completely secure. Any information you send to us is sent at your own risk.
12. Marketing Communications
We do not collect email addresses for marketing through our website, and we do not operate a mailing list sign-up on it.
Where we do send marketing about Harker - for example, an invitation to an event or an update to a sector contact - we do so either because you have asked us to, or because you are an existing customer contact and the message concerns similar services.
You can ask us to stop sending you marketing at any time, by using the unsubscribe link in any message or by emailing us at dpo@harkerapp.com. We will still send you necessary service or administrative messages relating to any contract between us.
13. Children
Our marketing website is intended for professionals working in and around the homelessness sector, and is not directed at children. We do not knowingly collect personal information from children through it. If you believe a child has provided us with personal information, please contact us and we will delete it.
14. Automated Decision-Making and Profiling
We do not make any decisions about you based solely on automated processing, and we do not carry out profiling of visitors to our marketing website.
15. Changes to this Policy
This policy was published on 7 August 2026 and was last updated on 7 August 2026.
We may change this policy from time to time. Where the change is significant, we will tell you - by a notice on this website or, where we hold your contact details and the change affects you, by email. Please check this page from time to time for the latest version.
16. How to Complain
We hope that we can resolve any query or concern you raise about our use of your personal information. Please contact us first using the details below.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection:
Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 ico.org.uk/make-a-complaint
17. How to Contact Us
Please contact James Barber, our Data Protection Officer, if you have any questions about this privacy policy or the information we hold about you.
If you wish to contact James Barber, our Data Protection Officer, please send an email to dpo@harkerapp.com, write to James Barber, Harker Technologies Limited, CENTRAL TECH, 31 Russell St, Liverpool, L3 5LJ or call +44 151 433 9190.
If you would like this notice in another format (for example: audio, large print, braille) please contact us.