Privacy Policy

Last updated: October 2026

This Privacy Policy explains how Hookwell ("Hookwell", "we", "us" or "our") collects, uses, shares and protects personal information when you visit https://hookwell.io (the "Site"), book a call, contact us, receive an email from us or use our services.

Who we are. Hookwell is the data controller (UK GDPR and EU GDPR), the "business" (US state privacy laws, where they apply) and the Data Fiduciary (India's Digital Personal Data Protection Act, 2023) for the information described here. When we handle personal information on behalf of a client, such as data in their social media accounts or about people in their videos, the client is responsible for it and we act as their processor or service provider.

Contact for privacy questions, requests and grievances: [email protected]

1. Information we collect

  • Call bookings: your name, email address, phone number, answers to booking questions and the time you choose.
  • Messages: what you send us and notes from calls.
  • Client information: business and contact details, brand materials, audience and goals, footage you film for us (including your image, voice and likeness, and anyone else who appears), feedback, and the social media account access needed to post for you.
  • Billing information: billing name, business and address. Payments are handled by a secure payment provider; we do not store full card numbers.
  • On-camera releases: names, signatures and contact details of other people who appear in client footage (and of a parent or guardian for anyone under 18).
  • Site usage: pages viewed, referring page, browser and device type, and approximate location from your IP address, collected through essential cookies and cookieless analytics.
  • Public business contact details: name, job title, business, business email and website, collected from public sources such as business websites and professional profiles, or from someone who refers you to us.

We do not ask for sensitive personal information. Please do not include it in footage or messages unless your content needs it.

2. How we use it

To hold discovery calls and answer enquiries; deliver our services; provide support and send service messages and invoices; send occasional marketing emails about our services, including to businesses whose contact details are publicly available; improve and secure the Site; and meet legal, tax and accounting obligations and handle legal claims and payment disputes. We use your footage, image and voice only to deliver your content, unless you separately agree to portfolio use. We do not make decisions about you based solely on automated processing.

Marketing emails and opt-out. We email people only in their business capacity and about services relevant to their role. Every marketing email tells you how to opt out. If you opt out, we stop emailing you and keep only your email address on a suppression list so we do not contact you again. If we collected your details from public sources, this policy is our notice of where they came from and how we use them.

3. Legal bases

UK and EU: contract (to provide services you request or take steps before a contract); legitimate interests (to run, secure and market our business, including business-to-business email with an opt-out, where your rights do not override these interests; where local law requires consent for such email, we ask first or do not send it); consent (for any non-essential cookies and consent-based marketing, which you can withdraw at any time); and legal obligation.

India: your consent, or legitimate uses permitted by the DPDP Act, such as where you have voluntarily given us your data for a specific purpose or where the law requires us to keep it.

4. Sharing

We do not sell your personal information or share it for cross-context behavioral advertising. We share it only as needed with: service providers that help us run the business (such as website hosting, booking, customer management, email, file storage, payments and analytics), who may use it only to serve us; our payment provider, including records needed to respond to a payment dispute; contractors who help deliver client work, under confidentiality; social media platforms, when we post a client's approved content to the client's accounts; professional advisers; authorities where the law requires; and a buyer or successor of our business.

5. International transfers

We and our service providers may process information in India and other countries where our service providers operate. For transfers out of the UK or EEA we use appropriate safeguards, such as Standard Contractual Clauses or the UK transfer addendum, or rely on adequacy decisions. Transfers out of India follow the DPDP Act.

6. How long we keep it

  • Leads that do not become clients: up to 24 months after our last contact.
  • Client billing records: 8 years after the engagement ends, or longer if the law requires.
  • Other client information: for the length of the engagement.
  • Raw client footage: deleted 90 days after the contract ends.
  • On-camera releases: while the related videos are in use, plus any period needed for legal claims.
  • Marketing data: until you opt out (we then keep only a suppression record).

7. Cookies

We use only essential and functional cookies, and cookieless analytics. We do not use advertising, retargeting or cross-site tracking. See our Cookie Notice, published on the Site.

8. Security

We use reasonable technical and organizational measures, including access controls and two-factor login where available. No system is completely secure. If a personal data breach occurs, we will notify affected people and regulators where the law requires.

9. Your rights

UK and EU. You may have the right to access, correct or delete your information; restrict or object to processing (including direct marketing, at any time); data portability; and to withdraw consent. We respond within one month. You may complain to your data protection authority (in the UK, the Information Commissioner's Office).

United States (including California). Depending on where you live, you may have the right to know what personal information we collect, use and disclose; to access, correct and delete it; to opt out of its sale or sharing or of certain profiling; to limit use of sensitive information; and not to be discriminated against for using these rights. In the past 12 months we collected identifiers, commercial information, internet activity, audio and visual information (client footage) and professional information, from the sources and for the purposes above. We do not sell or share personal information, including of anyone under 16. We will verify your identity before responding, you may use an authorized agent, and we honor Global Privacy Control signals where the law requires.

India. You have the right to a summary of your personal data and its processing; to correct, complete, update or erase it; to withdraw consent at any time; to nominate someone to exercise your rights; and to have grievances addressed. Our grievance contact is [email protected]. You may also complain to the Data Protection Board of India.

To exercise any right, email [email protected].

10. Children

Our Site and services are for businesses and professionals, not children. We do not knowingly collect personal information from anyone under 18, except through a parent or guardian signing an on-camera release. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes

We may update this policy and will post the new version here with a new "Last updated" date. For significant changes, we will take reasonable steps to tell you.

12. Contact

Hookwell
Email: [email protected]
Website: https://hookwell.io