Privacy policy

Who we are

This website is operated by WEBWISP LTD, a company registered in England and Wales with company number 15872526. Our registered address is 3 Saxon Court, Horton Heath, Eastleigh, England, SO50 7FG.

For anything in this policy, or to exercise any of the rights described below, email hello@webwispuk.com.

We are the data controller for the information described here. That means we decide why and how it is used.

What this policy covers

This policy covers information we collect through this website: when you submit a form, when you use one of the free tools, and the technical information your browser sends when you visit a page. It also covers information we collect about people at UK limited companies and similar corporate bodies that we may contact by email about our services: see 'If we have emailed you about our services' below.

It does not cover the work we do for clients under a service agreement. If you are a client, the agreement you signed sets out how we handle information about your business and your customers.

It does not cover other websites we link to. Those have their own policies.

If we have emailed you about our services

We sometimes email people at UK limited companies and similar corporate bodies that we think may benefit from our services. This section explains where we got your details, what we do with them and how to stop us.

Where your details come from

We did not get your details from you. We collect them from:

• Google Maps business listings: the business name, address, phone number, website and type of business.
• Your business's own website: work email addresses and names published there, and information about what the business does and where it works.
• Companies House: the company's name, number, status and registered office, and the names of its directors and people with significant control.

For some people we emailed before October 2026, we also used public trade registers (the MCS installer directory, and the NICEIC, TrustMark and FENSA registers) and two business data providers, Explorium and Clay.

Google Maps, business websites, Companies House and the trade registers are publicly accessible. The business data providers are not. We stopped buying contact data in October 2026.

What we hold about you

Your name, your work email address, your role (for example director), the business you work for and the business information above. We also keep a record of the emails we send you, any reply and any request to stop. Some Companies House files we downloaded also contain the month and year of birth, nationality and correspondence address that Companies House publishes for people with significant control. We do not use these to contact you, and we are deleting them. We do not hold sensitive information, and we do not track whether you open our emails or click links.

Why we use it, and our lawful basis

We use it to send you a small number of emails about our search and AI visibility services, to personalise them to your business (for example, checking whether your business appears in ChatGPT or Google answers for your area), and to record any reply or request to stop.

Our lawful basis is legitimate interests: telling businesses about a service relevant to them. We have assessed that interest against the impact on the people we contact. You can ask us for a summary of that assessment at hello@webwispuk.com. We only email limited companies and similar corporate bodies, never sole traders or ordinary partnerships, and only at work addresses.

Your right to object

You can tell us to stop at any time and we will. Reply "stop" to any of our emails, or email hello@webwispuk.com. This right is absolute: we will not email you for marketing again, and the request costs you nothing. We keep your email address and business domain on a do-not-contact list so that we never contact you by mistake in future.

Who we share it with

We do not sell your details or share them for anyone else's marketing. Suppliers who process them on our instructions:

• Smartlead, which sends our emails and records replies;
• Google Workspace, which provides our email accounts;
• MillionVerifier, which checks that an email address can receive mail before we use it;
• Hetzner, which hosts the server where we prepare our contact lists;
• AI service providers we use to research your business and draft a relevant email.

Some of these suppliers are based in or use infrastructure in the United States or the European Economic Area. The section "Where your information is held" explains the safeguards we use.

How long we keep it

If you don't reply, we keep your details for up to 12 months from our last email to you, then delete them. If you reply and we keep talking, we keep the correspondence for two years from our last contact, as for other enquiries. If you ask us to stop, we keep only your email address, business domain and the date you asked, for as long as we email businesses, so that we can honour your request.

Your other rights

You can also ask for a copy of what we hold about you, ask us to correct it, delete it or restrict how we use it. See "Your rights" below; we respond within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first at hello@webwispuk.com. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Information you give us

The audit request form, the contact form and the referral form ask for your name, your company, your website, your work email address, what your business sells, and optionally your phone number and a message. The referral form also asks for details of the person you are referring.

We use this to answer you, to prepare and send the free AI visibility audit you asked for, and to discuss whether one of our programmes fits. Our lawful basis is legitimate interests: you contacted us about a business service and you would reasonably expect a reply.

If you tell us about someone else, for example when making a referral, please make sure they are happy for you to pass their details on.

Every form also carries a hidden field that automated submissions tend to fill in and people do not. If it is filled in, we discard the submission.

Information we collect automatically

Our hosting provider records standard technical information for every request, including your IP address, the page requested, the time, and your browser's user agent. This is used to serve the site, to keep it available and to protect it from abuse. Our lawful basis is legitimate interests in keeping the service running and secure.

When you submit a form we briefly hold your IP address in memory to limit how many submissions can come from one address in a short period. It is not written to a database and is discarded when the process handling your request ends.

We do not build profiles of visitors, and no decision affecting you is made automatically.

Analytics

We use Google Analytics 4 to understand which pages are read, how people arrive and where they leave. This helps us decide what to write and what to fix.

Google Analytics sets cookies in your browser and processes your information on our behalf. We only load it if you agree to analytics cookies. If you do not agree, it is not loaded and no analytics cookies are set.

We have configured Google Analytics to collect no more than we need for that purpose. It is not used to identify you personally and we do not combine it with information you give us through a form.

Our lawful basis for analytics is your consent. You can withdraw it at any time using the cookie settings on this site, and doing so is as easy as giving it.

Cookies and local storage

A cookie is a small file a website asks your browser to keep. Local storage is a similar mechanism that stores information in your browser without sending it back to us.

Strictly necessary: we store your cookie choice in your browser's local storage so we do not ask you again on every page. This does not require consent because the site cannot honour your choice without it.

Analytics: Google Analytics sets cookies, typically named _ga and _ga_ followed by a property identifier, which distinguish one browser from another and group requests into a visit. These are only set if you agree.

The free tools on this site do their work entirely in your browser. Nothing you drop into the image compressor or the favicon generator is uploaded to us or to anyone else, and none of it is stored. Some tools remember a setting in your browser's local storage so it is still there next time.

The font pairing tool loads typefaces from Google Fonts when you select them. Doing so tells Google that a request came from your browser. If you would rather that did not happen, do not use that tool.

You can clear or block cookies in your browser settings. Blocking the strictly necessary storage will mean the cookie notice reappears.

Who we share information with

We do not sell your information and we do not share it for anyone else's marketing.

We use a small number of suppliers who process information on our instructions. Cloudflare hosts this website and serves it. Resend delivers the emails our forms generate, including the copy sent to you. Google provides the analytics described above, if you agree to it.

Each of these is bound by a contract that limits them to acting on our instructions. We share what they need to do their job and no more.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

Where your information is held

Our suppliers are based in, or operate infrastructure in, the United Kingdom, the European Economic Area and the United States.

Where information is transferred outside the UK, we rely on the safeguards the law provides for such transfers, such as the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or a data bridge where one is in place.

You can ask us for details of the safeguard that applies to a particular supplier.

How long we keep it

Enquiries and audit requests that do not become client work: two years from the last contact, after which we delete them.

Enquiries that become client work: kept for the duration of the engagement and then in line with the retention period in the service agreement, plus any period we are required to keep records for tax or legal purposes.

Analytics: Google Analytics keeps event-level data for two months and user-level data for fourteen months from a browser's most recent visit, after which it is deleted automatically. Aggregated reports, which do not identify individual browsers, are not subject to these limits.

Server logs held by our hosting provider are kept for their standard period and then discarded.

Your rights

Under UK data protection law you have the right to ask us for a copy of the information we hold about you, to have it corrected if it is wrong, and to have it deleted.

You can also ask us to restrict how we use it, object to our using it on the basis of legitimate interests, and ask us to transfer it to someone else in a portable form where that applies.

Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did before you withdrew it.

Email hello@webwispuk.com and we will respond within one month. We may ask you to confirm who you are before we act, so that we do not disclose your information to someone else.

There is no charge for any of this unless a request is excessive or repetitive, in which case we will tell you before doing anything.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113. You do not have to come to us first.

Changes to this policy

If we change how we handle information, we will update this page and change the date at the top.

If a change is significant, and we hold your contact details because you asked us to get in touch, we will tell you directly.