Privacy Notice
Last updated: 28 June 2026
This Privacy Notice explains how Hatch Oxford collects, uses, stores and protects personal information when you use our website, contact us, engage with our services, or otherwise interact with us. Hatch Oxford respects your privacy and is committed to handling personal information lawfully, fairly and transparently.
1. Who we are
Hatch Oxford is the trading name of Collaborative Engineering Services Ltd, a private limited company registered in England and Wales. For the purposes of UK data protection law, the data controller is:
Collaborative Engineering Services Ltd, trading as Hatch Oxford
Company number: 14131159
Registered in: England and Wales
Registered office: 6 Fairfax Road, Oxford, England, OX4 2QG
Email: lesley@hatchoxford.com
Telephone: +44 (0) 7393 501265
Hatch Oxford is a consultancy working at the intersection of deeptech engineering, commercialisation and venture formation. We support universities, startups, spinouts, SMEs, investors and innovation-led organisations with commercial strategy, investor readiness, market validation, venture development and growth support.
If you have any questions about how we use your personal information, please contact us using the details above.
2. Personal information we collect
We may collect and process the following types of personal information:
Name; job title; organisation or company name; email address; telephone number; information you provide through contact forms, email enquiries, meeting requests or other communications; information relating to projects, opportunities, collaborations or services you discuss with us; website usage information, such as pages visited, approximate location, device type, browser type and interaction with the website; marketing preferences, including whether you have opted in to receive updates from us; and any other information you choose to provide to us.
We do not intentionally collect special category personal data through our website, such as health information, political opinions, religious beliefs, biometric information or other sensitive personal data. Please do not provide this type of information unless it is necessary for your enquiry.
3. How we collect personal information
We may collect personal information when you visit our website, submit a contact form, email, call or message us, subscribe to updates or marketing communications, attend a meeting, event or introduction involving Hatch Oxford, engage us to provide services, provide information during a business development, partnership or project discussion, or interact with us on professional platforms such as LinkedIn.
We may also receive limited business contact information from public sources, professional networks, referrals, event attendee lists or partner introductions where it is reasonable and lawful for us to use that information for business purposes.
4. How we use your personal information
We use personal information for the following purposes:
| Purpose | Type of information used | Lawful basis |
|---|---|---|
| To respond to enquiries or contact requests | Name, contact details, organisation, message content | Legitimate interests or steps prior to entering into a contract |
| To provide consultancy services | Contact details, organisation details, project information, correspondence | Contract or legitimate interests |
| To manage client, partner and supplier relationships | Business contact details, correspondence, meeting notes, project records | Legitimate interests or contract |
| To develop business relationships and identify relevant opportunities | Business contact details, organisation details, professional role, publicly available information | Legitimate interests |
| To send updates, newsletters or marketing communications | Name, email address, organisation, marketing preferences | Consent or legitimate interests where permitted by law |
| To improve our website and understand how it is used | Website usage data, device data, cookies or similar technologies | Consent for non-essential cookies; legitimate interests for essential website operation |
| To maintain records and comply with legal, tax, accounting or regulatory obligations | Contact details, contract records, invoices, correspondence | Legal obligation or legitimate interests |
| To protect our website, business and legal rights | Technical data, correspondence, records of interactions | Legitimate interests or legal obligation |
Where we rely on legitimate interests, we only do so where we have considered that our use of your information is necessary, proportionate and not overridden by your rights or interests.
5. Marketing communications
We may send you updates about Hatch Oxford, our services, events, insights or opportunities where you have asked to receive them or where we are otherwise permitted to do so by law.
You can unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly.
We do not sell personal information to third parties for marketing purposes.
6. Cookies and similar technologies
Our website may use cookies and similar technologies to operate effectively, improve functionality, analyse website traffic and understand how visitors use the site.
Some cookies are essential for the website to work properly. Other cookies, such as analytics, advertising, tracking or embedded third-party cookies, will only be used where permitted by law and, where required, with your consent.
You can manage or disable cookies through your browser settings. If we use non-essential cookies, we will provide a cookie banner or preference tool allowing you to accept, reject or manage cookie choices.
For more information, please see our separate Cookie Policy.
7. Sharing personal information
We may share personal information with trusted third parties where necessary for the purposes set out in this Privacy Notice. These may include website hosting and IT service providers, email, CRM, cloud storage and business software providers, professional advisers such as accountants, lawyers or consultants, project partners, collaborators or delivery partners where relevant to an enquiry or agreed service, event platforms, mailing platforms or analytics providers, and public authorities, regulators or law enforcement bodies where required by law.
We only share personal information where there is a lawful reason to do so and, where appropriate, under contractual obligations requiring third parties to protect that information.
8. International transfers
Some of the service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take steps to ensure that appropriate safeguards are in place. These may include use of UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or other safeguards permitted under UK data protection law.
9. How long we keep personal information
We keep personal information only for as long as necessary for the purposes for which it was collected, including for legal, accounting, reporting or business record purposes.
As a general guide, enquiry records are usually kept for up to 24 months after the last meaningful contact, unless the relationship continues. Marketing contact details are kept until you unsubscribe or ask us to remove them, subject to periodic review. Client, supplier and contractual records are usually kept for up to seven years after the end of the relationship, unless a longer period is required for legal or regulatory reasons. Website analytics data is retained according to the settings of the relevant analytics provider and our cookie preferences.
We may retain limited information for longer where necessary to establish, exercise or defend legal claims.
10. How we protect personal information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, secure systems, password protection, data minimisation, restricted access to records, secure cloud services and internal procedures for handling personal information.
No internet transmission or electronic storage system can be guaranteed to be completely secure. However, we take reasonable steps to protect the information we hold.
11. Your rights
Under UK data protection law, you may have the right to request access to the personal information we hold about you; request correction of inaccurate or incomplete information; request deletion of your personal information; request restriction of processing; object to processing based on legitimate interests; object to direct marketing; withdraw consent where processing is based on consent; request transfer of your personal information in certain circumstances; and complain to the Information Commissioner’s Office.
To exercise your rights, please contact us at:
We may need to verify your identity before responding to a request.
12. Complaints
If you are unhappy with how we handle your personal information, please contact us first so that we can try to resolve the issue.
You also have the right to complain to the UK Information Commissioner’s Office, which is the UK regulator for data protection matters.
Information Commissioner’s Office
Website: www.ico.org.uk
Telephone: 0303 123 1113
13. Links to other websites
Our website may contain links to third-party websites, platforms or resources. We are not responsible for the privacy practices, security or content of those external websites. You should review the privacy notices of any third-party websites you visit.
14. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to our services, website, legal obligations or operational practices.
Any updates will be posted on this page with a revised “last updated” date.