Last updated: 10 October 2026 · Version 2.1
HarvestHawk AgriSystem Ltd ("HarvestHawk", "we", "us", "our") is a precision drone services company based in Cornwall, UK, with further operating bases in Stratford-upon-Avon (Warwickshire) and Hertfordshire. We provide crop mapping and variable rate prescription maps now, and will provide GPS-guided drone spraying, aerial spreading, aerial seeding and orchard spraying from late October 2026, once the Civil Aviation Authority grants our Operational Authorisation. We are the data controller for the personal data described in this policy.
For any questions about this policy or how we handle your data, please contact us at:
We are registered with the Information Commissioner's Office (ICO) as a data controller under registration reference ZC197205. Our registration is current, having been registered on 13 July 2026, and is renewed annually.
This policy covers our main website at harvesthawk.co.uk and our examples site at demo.harvesthawk.co.uk, which shows an example field map and crop report. The Farmers Portal at portal.harvesthawk.co.uk has its own privacy terms, described in section 2.2.
We collect personal data that you provide to us directly. This includes:
If you become a client, you will be given access to Farmers Portal. Data collected and processed within the portal, your account, fields, jobs, reports, invoices, and messages, is governed by the separate privacy terms and service agreement provided when your portal account is created.
If you registered your interest in the portal before it launched (name, email address, farm or business name), we retain those details only to let you know about your access, and you can ask us to delete them at any time.
When you visit our website, we may automatically collect:
If you choose to chat with Barley, our AI assistant, we collect:
The messages you type to Barley are sent to Anthropic's API, in the USA, to generate each reply. No account data is sent with them. If you ask Barley to pass your details to the team, the name, contact details and farm details you give him in the chat are sent through that same API as part of the conversation and are then recorded as an enquiry in our Farmers Portal, exactly as if you had used the quote form. Those details are kept under the enquiry retention period below. Your conversation itself is kept in your browser only for the duration of your visit and is cleared when you close the tab.
When you email us, or we email you, we receive:
We use this to reply to you, prepare quotes, and stay in touch about your enquiry. We rely on our legitimate interest in responding to enquiries and running our business. We will not send you marketing without your consent.
Where you become a client, our handling of your data, including jobs, invoices, field data, and messaging, is governed by the separate privacy terms and service agreement provided through our Farmers Portal.
A note on our no-reply address: messages sent to no-reply@harvesthawk.co.uk are not monitored and will not reach our team. Please use info@harvesthawk.co.uk for anything you need.
We rely on three lawful bases under UK GDPR: your consent, the performance of a contract with you (including steps you ask us to take before a contract), and our legitimate interests in running the business, which we always weigh against your rights. Where the law requires something of us, we also rely on legal obligation. We use your personal data for the following purposes:
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Responding to quote requests, contact form messages and enquiries | Legitimate interest, or steps taken at your request before entering a contract |
| Launch-interest form (name, email, phone, county, rough acreage and the first service you want): telling you when that service opens in your area. Retained until that service launches plus 24 months, or sooner if you ask | Legitimate interest, or steps taken at your request before entering a contract |
| Careers applications: assessing your application and keeping in touch about it | Steps taken at your request before entering a contract / Legitimate interest |
| Setting up and administering your Farmers Portal access | Contract performance / Legitimate interest |
| Sending service-related communications by email and text message (job confirmations, date changes, invoices) | Legitimate interest / Contract performance |
| Sending news, offers and details of shows we are attending, by email or text message | Consent, which you give by ticking a box we never pre-tick, and can withdraw at any time |
| Improving our website and services | Legitimate interest |
| Providing the Barley AI chat assistant and following up on callback requests | Consent |
| Complying with legal obligations | Legal obligation |
Your data is stored securely using industry-standard measures. Form submissions on this website are processed by Netlify, Inc., and a copy is sent to our own Farmers Portal so that your enquiry reaches the team rather than sitting in an inbox.
Your data is processed in the UK and, for the providers named below, in the United States of America. Where data leaves the UK we rely on the UK Addendum to the EU Standard Contractual Clauses or, where the provider is certified, the UK Extension to the EU-US Data Privacy Framework, as applicable. The processors this website uses are:
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:
We contact you in two distinct ways, and they are governed separately.
Service messages are part of dealing with your enquiry or delivering work you have booked: replying to you, confirming a job, telling you a date has moved, or letting you know an invoice is ready. These are sent by email and, for clients, by text message. Clients can turn either channel off at any time in their portal settings.
Marketing messages are news, offers and the shows we are attending. We only ever send these to people who have actively asked for them by ticking a box, and we never pre-tick that box. Saying no has no effect whatsoever on the service you receive or the quote you are given. Every marketing message carries a one-click link to stop them, and we act on it immediately.
Where you do consent, we record when you gave it, the wording you were shown at the time and where the request came from, so that we can show you exactly what you agreed to if you ask.
Text messages are sent from the sender ID HarvestHawk. They cannot be replied to, and every message says so. To reach us, use email, the portal or WhatsApp.
We do not sell your personal data to third parties. We may share your data with:
Where data is transferred outside the UK, principally to the United States providers named above, we rely on the UK Addendum to the EU Standard Contractual Clauses or the UK Extension to the EU-US Data Privacy Framework, as applicable, in accordance with UK GDPR.
Under UK GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, please email info@harvesthawk.co.uk. We will respond within one month.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
Cookies are small text files placed on your device when you visit our website. We use them to make the site work properly and, with your consent, to understand how visitors use it.
| Category | Purpose | Consent required? |
|---|---|---|
| Necessary | Essential for the website to function (e.g., cookie consent preferences, and browser storage that remembers your Barley AI conversation for the current visit only). These do not collect personal data for marketing or analytics. | No, always active |
| Analytics | Help us understand how visitors interact with our website (e.g., pages visited, time on site). Data is aggregated and anonymous where possible. | Yes |
| Marketing | Used to deliver relevant advertisements and track the effectiveness of marketing campaigns across platforms. | Yes |
The examples site sets no cookies and stores nothing in your browser. It has no analytics or advertising tags, no forms and no chat, so it does not show a cookie banner. Its fonts and map software are served from the site itself, so opening it sends nothing to Google or any other third party. Like our main website it is hosted by Netlify, Inc., which keeps standard server logs (your IP address, the pages requested and the time) for security and to keep the site running. The example field and its imagery come from Pix4D's training dataset and contain no personal data.
When you first visit our website, a cookie banner will ask for your consent. You can choose to:
Your choice is recorded in your browser's local storage (key hh_cookie_consent) with the categories you chose (necessary, analytics, marketing), the date you chose them and the version of this policy you were shown. No cookie consent is sent to us. You can change or withdraw your consent at any time using the Cookie Preferences link in the footer of any page, which reopens the cookie banner, and withdrawal takes effect immediately.
Google’s tag is present on every page of this site, but it starts in a “denied” state. Until you tell us otherwise, it sets no analytics or advertising cookies and reads nothing already stored on your device. The moment you make a choice on the banner, we pass that choice straight to Google and it takes effect immediately, including if you later withdraw it.
Google's tag is not loaded at all until you make a choice in the cookie banner and allow analytics or marketing cookies. If you choose Necessary Only, nothing is sent to Google. If you later allow analytics or marketing, the tag loads and runs in Consent Mode, so only the categories you ticked are used.
If you consent to analytics or marketing cookies, third-party services may place cookies on your device. These services have their own privacy policies:
You can also control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking necessary cookies may affect how the website functions. For guidance:
We may update this policy from time to time. Any changes will be posted on this page with the "last updated" date and version number revised accordingly. This is version 2.0, published 8 October 2026. We encourage you to review this page periodically.
If you have any questions about this Privacy & Cookie Policy, or wish to exercise your data rights, please contact us: