Effective date: 31 July 2026
Hally Group Limited (company number 17298107), trading as Hally Writer (we, us or Hally Writer), is committed to handling personal data responsibly. This policy explains how we use personal data when you visit, contact or use Hally Writer. It should be read with our Terms of Use and Cookie Policy.
1. Who is responsible for your data
Hally Group Limited, trading as Hally Writer, is the controller of personal data we use to run our website, manage accounts, provide support, administer subscriptions and market Hally Writer. You can contact us at hello@hallywriter.com.
Where a business customer uploads or enters personal data into a Hally Writer workspace for its own purposes, that customer is normally the controller and we process that data as its processor under the applicable customer agreement. If this applies to you, please contact your organisation first.
2. Data we collect
We may collect account and profile information (such as your name, email address, organisation and role); billing information (such as billing contact, company, tax and invoice information); communications you send us; technical and security information (such as IP address, device, browser, log and authentication information); and the content, briefs, brand profiles, files, feedback and instructions you submit in the service. We store that content and related workspace records in our hosted database so that the service can provide workspace access, content history, sharing, exports, security and support.
3. How and why we use data
We use personal data to create and secure accounts; provide, maintain and improve Hally Writer; generate, check, store, share and export content at your request; process payments; communicate about the service; respond to support requests; prevent fraud and misuse; comply with law; and establish, exercise or defend legal claims.
Our legal bases include performing a contract with you, our legitimate interests in running and securing our business and improving the service, complying with legal obligations, and consent where required. We only send direct marketing where permitted by law; you can unsubscribe at any time.
4. Service providers and transfers
We use carefully selected providers to help us run Hally Writer, including Render for hosting and database services, Clerk for authentication, Stripe for payments, OpenAI for AI-assisted features and Resend for transactional email delivery. These providers process data only as needed to deliver their services to us, subject to appropriate contractual protections.
We may also share data with other members and administrators in the relevant workspace, people you choose to share content with, our professional advisers, regulators, law-enforcement bodies and potential buyers or successors of our business where this is necessary and lawful.
Some providers may process data outside the UK. Where this happens, we use an adequacy decision or appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to EU standard contractual clauses, or another lawful transfer mechanism.
5. AI processing
When you use AI-assisted features, relevant Input (for example, a brief, brand profile or content to review) is sent to our AI provider to produce the requested result. Do not enter information you are not entitled to share. We do not use your workspace content to train public or general-purpose AI models unless we clearly ask for and receive your permission.
6. Retention and security
We keep personal data only for as long as necessary for the purposes above, including to maintain your account and workspace, meet legal, tax and accounting obligations, resolve disputes and protect the service. If you delete an account, your login and membership data are removed; workspace content may remain with the relevant organisation as “Deleted member”. When an organisation is closed, its records are archived securely for internal recovery and legal purposes. We use proportionate technical and organisational measures to protect data, but no online service can guarantee absolute security.
7. Your rights
Depending on applicable law, you may have rights to request access to, correction or deletion of your personal data; restriction or objection to processing; portability; and withdrawal of consent. You can also manage certain account data in Hally Writer. To exercise a right, email hello@hallywriter.com. We may need to verify your identity.
Right to object: you may object at any time to processing based on our legitimate interests, including direct marketing. We will stop that processing unless we have compelling legitimate grounds or another lawful reason to continue.
If you are in the UK, you may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would appreciate the chance to resolve your concern first.
8. Children and changes
Hally Writer is a business service and is not directed at children. We do not knowingly collect personal data from children. We may update this policy from time to time and will publish the new version here with an updated effective date.