Effective 20 September 2026
Privacy policy
About this policy
This policy explains the handling of website visits and enquiries about Wontle’s software development services. Wontle is the controller for correspondence about its own work.
The two hats
When Wontle answers a direct enquiry, it decides the purpose and means of using that message. That is the controller role. If a separate engagement asks Wontle to process customer data while developing or maintaining an application under written instructions, the company can be a processor for that register and controller for its own billing, scheduling and relationship notes. Instructions are kept in the engagement record.
What a letter can contain
A sender may choose to include a name, an address for reply, a role, the wording of a question and attachments. A browser also sends a time, a requested page, a user-agent string and a network address. The public pages do not ask a visitor to open an account or volunteer a special category of information.
Reasons for keeping a line
Wontle uses messages to answer a request, prepare a conversation, keep a decision record and protect the website. The lawful basis is usually steps requested by the sender, a legitimate interest in running a reliable service, or a legal obligation. Consent is used only when the page asks for it and a person can change their mind.
When a note leaves the desk
Email hosting, domain registration, website delivery and professional advisers may receive a narrow copy of a record. Each recipient has a defined task. Wontle does not sell a correspondence list or turn a question into an advertising profile.
Retention, time and deletion
Working correspondence is reviewed when the discussion closes. A useful record can be kept for a further period where it explains an agreement; accounting material follows the statutory period. Security logs are short-lived. A person can request account deletion or erasure by writing to [email protected], even though this public site does not require an account. A legal hold or a duty to keep a record can limit deletion, and the reply will explain that reason.
Outside the UK
If a supplier handles information from another country, Wontle uses an adequacy decision or a recognised transfer instrument such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the Standard Contractual Clauses. The destination and safeguards are recorded with the supplier decision.
An incident
A suspected breach is logged, contained and assessed. Where the risk threshold is met, the company reports to the Information Commissioner’s Office within 72 hours of awareness and contacts affected people when required. A processor sends the relevant controller a notice without undue delay.
Rights and younger readers
A person may ask for access, correction, erasure, restriction, objection or portability where the UK GDPR provides the right. Identity may be checked, and a response is normally due within one month. The site is not directed to children; a parent or guardian can write if a child has sent information.
A human route
Questions about this policy go to [email protected]. A complaint can be taken to the ICO at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113. The company may revise this page when its practice or the law changes.
Privacy information for commissioned apps
This notice covers this website and development enquiries. A commissioned application needs privacy information that reflects its own features, data collection and third-party components. Its publisher’s notice and store disclosures identify those practices.
For an iOS release, tracking as defined by Apple requires permission through App Tracking Transparency (ATT). See Apple’s privacy requirements. For an Android release, the Google Play Data Safety declaration must accurately describe the app’s collection and sharing, including SDK behaviour; see Google Play’s Data Safety guidance. Website visits do not establish an app’s data practices.