Privacy policy.

Who we are

Studio Woodlark Professional Services is a trading name of Woodlark Associates Ltd, a company registered in England & Wales (Company No. [TODO]). Registered office: [TODO]. ICO registration: [TODO].

For data-protection purposes, Woodlark Associates Ltd is the data controller for personal data described on this page.

Contact: hello@woodlarkassociates.co.uk.

What we collect via this website

When you submit the contact form on the home page, we collect:

• Your name
• Your firm's name
• Your firm's website URL
• Your email address
• Any free-text notes you provide
• The submission timestamp and (technical) the IP address that submitted it, used by Cloudflare Turnstile for abuse prevention

We do not use cookies for tracking. We use Cloudflare Web Analytics, which is cookieless and does not fingerprint visitors.

Why we collect it (lawful basis)

We process the personal data you submit on the basis of legitimate interests (UK GDPR Article 6(1)(f)) — specifically to provide you with a free preview rebuild of your firm's website, which is the service you requested by submitting the form.

We also rely on legitimate interests for cold-outreach communications where we contact firms whose existing websites are running on a publicly-identified template, with a single-purpose preview-rebuild offer. We disclose this processing under Article 14 of the UK GDPR in our cold-outreach emails and retain a Legitimate Interests Assessment (LIA) on file. You can opt out at any time.

What we do with it

• We build a preview rebuild of the website you submitted and send you the URL.
• We retain the submission so we can produce that preview, follow up where appropriate, and answer questions later.
• We do not sell, rent, or share your data with third parties for marketing purposes.
• We use Cloudflare for hosting and Turnstile for form abuse-prevention; both are sub-processors under our data-controller status.

How long we keep it

We retain your submission for up to 24 months from the date you sent it, unless we have an ongoing customer relationship — in which case we retain the data while that relationship is active, plus 7 years for tax / contract record-keeping purposes (HMRC requirement). If you ask us to delete your data earlier, we'll do so subject to that legal retention requirement on contractual records.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have it corrected if it's inaccurate
• Have it deleted (subject to the retention limits above)
• Object to our processing on legitimate-interests grounds
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these, email hello@woodlarkassociates.co.uk and we'll respond within 30 days.

International transfers

Our infrastructure runs on Cloudflare. Cloudflare may process data in regions outside the UK / EU under standard contractual clauses. We do not otherwise transfer personal data outside the UK / EU.

Changes to this policy

If we update this policy materially, we'll change the "Last reviewed" date at the top. For minor changes (typos, formatting), we won't.