Legal & Policies
Index of the complete Hybytes legal and policy framework
Last updated:
27 August 2026
Introduction:
The policies below make up the complete framework between you and Hybytes Ltd. If you engage us to deliver our Services, you accept the engagement framework when you sign a Statement of Work or engagement letter that references it.
If you are simply visiting hybytes.com, our website and company policies apply to you regardless. Hybytes Ltd is registered in England and Wales, company number 13562774, with its registered office at 251 Grays Inn Road, London WC1X 8QT, United Kingdom, and operates hybytes.com.
1. The engagement framework (for clients)
Your acceptance of an engagement covers the complete framework below. The Terms of Business is the umbrella agreement; the other documents are incorporated into it by reference and form part of the same contract.
- Terms of Business: the umbrella agreement governing every engagement.
- Acceptable Use Policy: rules for using Hybytes-provided or Hybytes-managed systems.
- Engagement, Billing and Renewal Terms: rate cards, expenses, retainer renewal, and invoicing.
- Cancellation and Refund Policy: cancellation rights and refunds across engagement types.
- Data Processing Agreement: how we process personal data on a Client's behalf (Article 28 GDPR).
- Service Level Agreement: support tiers and operational targets for managed services.
2. Website and company policies
These apply to anyone visiting hybytes.com, whether or not you are a Client.
- Privacy Policy: how we collect, use, share, and protect personal data.
- Cookie Policy: how we use cookies and similar technologies.
- Sub-processors: third parties that support our processing of personal data.
- Copyright and Content Complaints: reporting illegal or infringing content on our website.
- Security Overview: how we secure our engagements, environments, and data.
- Complaints Policy: how to raise a complaint and how we handle it.
- Accessibility Statement: our commitment to making hybytes.com usable by everyone.
- Vulnerability Disclosure Policy: how to report a security vulnerability in good faith.
3. Governance and compliance policies
Alongside the contract above, we publish the corporate policies and statements that govern how we run Hybytes Ltd. These are summaries of our internal policies and do not form part of any client contract unless a Statement of Work says otherwise.
- Information and Cyber Security Policy: our internal information security governance policy.
- Data Protection Policy: our internal data protection governance commitments.
- Data Protection Complaints Procedure: how to raise and escalate a data protection complaint.
- Modern Slavery and Human Trafficking Statement: our voluntary statement on modern slavery and human trafficking.
- Human Rights Statement: our commitment to internationally recognised human rights.
- Environmental and Sustainability Policy: our approach to minimising environmental impact.
- Equality, Diversity and Inclusion Policy: our commitment to equal opportunities in employment and services.
- Health and Safety Policy Statement: our commitment to a safe and healthy working environment.
- Code of Ethics and Business Conduct: the standards of conduct expected of everyone at Hybytes.
- Whistleblowing (Speak-Up) Procedure: how to raise concerns about wrongdoing without fear of retaliation.
- Supplier Code of Conduct: the standards we expect from our suppliers.
- Social Value and Corporate Responsibility Statement: how we create value beyond our commercial work.
- Job Applicant Privacy Notice: how we handle personal data of job applicants.
4. Enterprise and negotiated engagements
All engagements are governed by a signed Statement of Work that incorporates this framework by reference. Where a Client requires negotiated terms, a custom SLA, pricing, or security commitments, those variations are stated directly in the SOW, which takes precedence over the framework above to the extent of any conflict, for that engagement only.
5. Questions
General legal questions, data protection questions, security reports, whistleblowing, complaints, billing questions, and accessibility questions can all be raised through our contact form.