Last updated: October 2025

This website is operated by Hay, Merricks & Co, a trading style of Novitas Group Ltd, registered in England & Wales (Company No. 16810720).

Registered Office: 167–169 Great Portland Street, London, England, W1W 5PF.

References in this Privacy Policy to “we”, “our”, or “us” mean Hay, Merricks & Co / Novitas Group Ltd.

We respect your privacy and are committed to protecting your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect personal information obtained through:

• Our website (www.haymerricks.co.uk);
• Email correspondence and contact forms;
• Professional or business-related communications; and
• Any digital or printed materials relating to our consultancy or project feasibility activities.

This policy does not apply to third-party websites linked from our site.

We only collect the minimal personal data necessary for professional or legitimate business purposes, which may include:

• Your name, email address, and contact details when you reach out via our contact form or email;
• Organisation or company name (if provided);
• Correspondence records (emails, attachments, and meeting notes);
• Technical data (such as IP address and browser type) collected automatically via our hosting provider for security and performance monitoring.

We do not collect or process any sensitive personal data (e.g. health information, racial or religious data, political opinions, etc.).

Your information is used strictly for:

• Responding to enquiries or professional correspondence;
• Managing early-stage project feasibility and professional coordination;
• Maintaining contact with interested partners, advisors, and consultants;
• Complying with legal or regulatory requirements; and
• Website security and maintenance.

We do not use your information for unsolicited marketing, automated profiling, or data resale.

We process personal data under one or more of the following lawful bases:

• Legitimate Interest: For business communications and feasibility project coordination.
• Contractual Necessity: When data is required to discuss or prepare professional services.
• Legal Obligation: When processing is required by law, regulation, or court order.

We retain correspondence and enquiry data only as long as necessary to fulfil the purposes outlined above, typically no longer than 24 months unless required for ongoing professional discussions or regulatory purposes.

After this period, data is securely deleted.

We use appropriate technical and organisational safeguards to protect your personal data, including encrypted email hosting, secure password management, and limited access controls.
However, no online system is entirely secure, and we cannot guarantee the absolute security of information transmitted electronically.

We do not sell, rent, or trade your data.
Your information may be shared only with:

• Trusted service providers (e.g. website host, email provider) acting under confidentiality agreements; or
• Legal or regulatory authorities, if required by law.

All third-party processors used by us are GDPR-compliant and only process data under our instructions.

Your data is stored within the United Kingdom or the European Economic Area (EEA).
If data is ever transferred outside these regions, equivalent protection and safeguards will be ensured as required by the UK GDPR.

Under data protection law, you have the following rights:

• Access to your data (a “subject access request”);
• Rectification of inaccurate data;
• Erasure of data (“right to be forgotten”);
• Restriction or objection to processing;
• Data portability (to another provider, if applicable).

Requests can be made by email to privacy@haymerricks.co.uk or by post to our registered office.
We aim to respond within 30 days.

Our website uses essential cookies for functionality and analytics. These do not personally identify you.

You may disable cookies in your browser settings, but this may affect site performance.

All information published on this site is provided in good faith for general informational and professional discussion purposes only.

We make no representations or warranties of any kind, express or implied, regarding accuracy, reliability, or completeness.

Hay, Merricks & Co / Novitas Group Ltd accepts no liability for any direct, indirect, or consequential loss arising from use of our website or reliance on information contained herein.

We may update this Privacy Policy periodically to reflect changes in regulation, practice, or our business activities.
Any updates will be posted on this page with a revised “last updated” date.

Data Protection Officer
Hay, Merricks & Co (Novitas Group Ltd)
Email: privacy@haymerricks.co.uk
Registered Office: 167–169 Great Portland Street, London, W1W 5PF