Hilman Ventures
Privacy & cookies
This notice explains the information involved when you visit this website, prepare a brief on your device or contact us.
Who is responsible
HILMAN VENTURES LTD (Cyprus registration HE434397), registered office: 1 Arch. Makariou III, Mitsi Building 3, 2nd Floor, Office 202, 1065 Nicosia, Cyprus, is responsible for its business enquiry records and the operation of this website. Contact us at pasha@hilman.ventures or +44 7738 573321 with privacy questions or requests.
Browsing and hosting
The website is delivered directly using Cloudflare. Hilman is responsible as controller for personal data processed for its website. Cloudflare provides hosting, content delivery and security under its Customer Data Processing Addendum. Technical delivery and security can involve an IP address, request time, requested page, browser information and security events. The page does not submit brief fields as part of these requests.
The local brief tool
The information entered into the brief tool is processed in the page on your device. This tool does not submit those fields to a server, create a customer account or keep them in this website’s persistent storage. You can choose to copy the text, download a file to your device or open a draft in your email app. Your browser, clipboard, downloaded files and email app are under your control.
Opening an email draft is separate from sending it. If you choose to send, your email provider processes the message and we receive the information you include. Do not put passwords, medical records, account credentials or other sensitive information into the tool or an initial enquiry.
Contacting us
If you email or call us, we use the contact details and business information you provide to answer the enquiry, clarify your requested work and manage any resulting engagement. We may also keep correspondence needed to document requests or meet legal obligations. We do not add an enquiry to a marketing list by default.
For an enquiry about work you are considering personally, processing may be necessary to take steps at your request before a contract. For business contacts acting for an organisation, our legitimate interest is responding to relevant business enquiries and administering professional relationships. Legal obligations may require us to keep particular records. Essential technical and security processing supports the legitimate interest in delivering and protecting the website. We do not rely on accepting this notice as blanket consent.
Project news and social links
The project-news section retrieves a cached public news list from this website. Our server checks selected official company newsrooms and stores public headlines, publication dates, source links and refresh status. Brief fields are not included. Social links are ordinary outbound links: LinkedIn content and tracking widgets are not embedded. Visiting an external source or social profile subjects that visit to its own privacy practices.
Cookies and external services
Our application code does not set advertising cookies, use an analytics SDK or request fonts from an external font service. Fonts are hosted with the site. The brief tool does not use localStorage or a tracking identifier. Hosting providers can operate necessary delivery, security or authentication mechanisms. External websites and email applications have their own privacy practices. Optional analytics or advertising technologies would need a separate assessment and, where required, a consent choice before activation.
Recipients and international processing
Hosting, security and business email providers handle information needed for their functions. Advisers may receive relevant correspondence where necessary for an engagement or legal obligation. We do not sell enquiry data.
Hosted website data may be processed outside the EEA. Cloudflare’s Customer Data Processing Addendum describes the applicable transfer safeguards, including standard contractual clauses and the UK Addendum where applicable. No EEA-only hosting is promised. Sending an email also involves your chosen email provider and our business email service, whose handling is separate from this local brief tool.
How long information is kept
The page does not keep brief fields in a website account or database. Correspondence is retained while needed to answer the request, manage an engagement, document decisions, or meet relevant recordkeeping and legal-claim requirements. Those purposes determine its retention.
The hosting DPA covers the hosting term and necessary closing obligations, including return or deletion unless law requires retention. We have not set or represented a particular server-log deletion period. You may request information about retention for your specific data.
Your rights
Depending on the circumstances, you can request access, correction or erasure of personal information, restriction of processing, objection to processing based on legitimate interests, and portability where the legal conditions apply. Where processing relies on consent, you can withdraw that consent. We may need proportionate information to verify a request. Rights are subject to applicable conditions and legal recordkeeping requirements.
Contact pasha@hilman.ventures. You can complain to a relevant supervisory authority, including the Cyprus Commissioner for Personal Data Protection.
Last updated: 28 October 2026