Privacy Policy

Last updated: 17 April 2026

1. Who We Are

Hanalytic Limited is a company registered in England and Wales, headquartered in London, UK. We provide SAP analytics and planning consultancy under the Hanalytic brand, and also operate the consumer Moyako brand as a trading name (covered by separate policies linked above).

This policy applies to hanalytic.co.uk and to professional engagements with Hanalytic Limited.

Contact: info@hanalytic.co.uk · Hanalytic Limited, London, UK

2. Data We Collect — hanalytic.co.uk

Our consultancy website collects no personal information from visitors. We do not use Google Analytics, Facebook Pixel, or any third-party trackers. We store only your theme preference and privacy-banner choice in your browser's local storage — this never leaves your device.

3. Enquiries & Professional Contact Data

If you contact us (by email or through a form) to enquire about our services, we receive:

• Your email address (and any information you choose to include)
• Your name and company, if provided

We use this solely to respond to your enquiry and qualify the potential engagement. We do not add you to any mailing list or share your details with third parties without your consent.

If you connect with us on LinkedIn, your LinkedIn profile data is governed by LinkedIn's own privacy policy.

4. Client Data During Engagements

SAP analytics engagements involve access to client systems and data. This access is governed by:

• The signed engagement agreement or Master Services Agreement (MSA) with the client, including any Non-Disclosure Agreement (NDA)
• Data Processing Agreements (DPA) where we act as data processor under Article 28 of UK GDPR
• Client security policies — we comply with the client's own access-control, retention, and confidentiality rules

We do not retain client data beyond the scope of the engagement. On project closure, we return or securely delete all client data in line with the engagement agreement.

5. Role under UK GDPR

For enquiries and prospective-client contact, Hanalytic Limited acts as data controller (Article 4(7)).

For active client engagements, Hanalytic Limited typically acts as data processor (Article 4(8)) under instructions from the client who is the data controller. The specific role is defined in the engagement agreement.

6. How Long We Keep Data

• Website logs (IP, access time): up to 30 days on the hosting provider, then purged
• Enquiry emails: retained for up to 24 months for sales-continuity purposes, then archived or deleted
• Client engagement records: retained for 6 years after engagement end, per UK statutory record-keeping requirements for professional services
• Client data accessed during engagement: returned or deleted per the engagement agreement; never retained for our own use

7. Third-Party Services

• Hostinger — web hosting for hanalytic.co.uk. Standard server logs may be recorded. Hostinger Privacy Policy.
• Microsoft 365 / Google Workspace — business email and document collaboration. Governed by the respective providers' privacy policies.
• LinkedIn — professional networking and lead generation. We do not share your data with LinkedIn beyond what you voluntarily provide in your own profile. LinkedIn Privacy Policy.

8. Your Rights (UK GDPR / EU GDPR)

Under UK GDPR, EU GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (subject to statutory retention obligations for client records)
• Object to processing
• Data portability
• Withdraw any consent at any time
• Lodge a complaint with the Information Commissioner's Office (ICO) or your local EU supervisory authority

To exercise any right, email info@hanalytic.co.uk.

9. International Transfers

Where client engagements involve international data transfers, these are covered by the applicable engagement agreement (Standard Contractual Clauses, UK International Data Transfer Addendum, EU-US Data Privacy Framework, or equivalent).

10. Data Security

We apply industry-standard technical and organisational measures: HTTPS everywhere, Content Security Policy, HTTP Strict Transport Security (HSTS), Permissions-Policy, principle-of-least-privilege access to client systems, encrypted email for sensitive client material where required, and regular review of our data practices.

11. Cookies & Local Storage

hanalytic.co.uk uses only essential storage: theme preference and privacy-banner acknowledgement (both localStorage). We do not use third-party tracking cookies. See our Cookie Policy for details.

12. Changes to This Policy

We may update this policy. Material changes will be announced on this page. The "Last updated" date above reflects the most recent revision.

13. Contact Us

Hanalytic Limited
London, United Kingdom
Email: info@hanalytic.co.uk

Data Protection queries: please use the same email and include "Data Protection" in the subject line.