Privacy policy.

What we collect

When you complete the contact form or book a call we collect the data you give us (typically: name, email, company, phone, the message itself). When you browse the site we collect aggregate analytics (visit counts, pages viewed, referrers) only after you grant explicit consent. The contact form is protected by hCaptcha, which processes your IP address and browser data to tell people from bots.

Lawful basis

For contact and booking forms: legitimate interest in responding to a business enquiry, or contract performance if you are a client. For analytics: explicit consent, set via the cookie banner.

Retention

Contact-form submissions: retained for 24 months from last meaningful interaction. Client engagement records: retained for 7 years from end of engagement per HMRC requirements.

Sub-processors

We use a small set of named processors: Cal.com (bookings), Mailgun (delivery of contact-form messages), hCaptcha (spam protection on the contact form), Google Analytics via Google Tag Manager (analytics, only after consent), and our UK web host. Each is covered by a data-processing agreement. See the cookie policy for what each one stores in your browser.

Your rights

Under UK GDPR you have the right to access, rectification, erasure, restriction, portability, and objection. To exercise any right, write to Wingenious Ltd at Wrexham, Wales, United Kingdom, call 01978 437121, or use the form on our contact page. We respond within 30 days.

ICO complaints

You may complain to the Information Commissioner's Office at ico.org.uk at any time.