Privacy policy.
Wingenious Ltd (Companies House 16665789) is the data controller of any personal data processed through wingenious.ai. This page describes what we collect, why, how long we keep it, and your rights under UK GDPR and PECR.
What we collect
When you complete a contact form, book a cal.com call, or subscribe to the newsletter we collect the data you give us (typically: name, email, company, phone, the message itself). When you browse the site we collect aggregate analytics (visit counts, pages viewed, referrers) only after you grant explicit consent.
Lawful basis
For contact and booking forms: legitimate interest in responding to a business enquiry, or contract performance if you are a client. For analytics: explicit consent, set via the cookie banner.
Retention
Contact-form submissions: retained for 24 months from last meaningful interaction. Client engagement records: retained for 7 years from end of engagement per HMRC requirements. Newsletter list: until you unsubscribe.
Sub-processors
We use a small set of named processors: Cal.com (bookings), Buttondown (newsletter), Formspark (contact forms), Cloudflare (CDN + edge), and our chosen analytics provider (post-consent). Each is GDPR-aligned and data-processing-agreement-covered.
Your rights
Under UK GDPR you have the right to access, rectification, erasure, restriction, portability, and objection. To exercise any right, write to Wingenious Ltd at Wrexham, Wales, United Kingdom, call 01978 437121, or use the form on our contact page. We respond within 30 days.
ICO complaints
You may complain to the Information Commissioner's Office at ico.org.uk at any time.
Full policy in progress. This page covers the core obligations and will be expanded with the full sub-processor list and the ICO registration number once Cyber Essentials certification completes.