WiredLight Ltd is committed to handling personal data fairly, transparently and securely. This policy explains what we collect, why we use it and the rights available to you.

Who we are

WiredLight Ltd (“WiredLight”, “we”, “us” or “our”) is the data controller responsible for the personal data described in this policy.

Company number: 07161979, registered in England and Wales.

For questions about this policy or how we handle personal data, email info@wiredlight.net or use our contact page.

What personal data we collect

The information we collect depends on how you interact with WiredLight.

Website visitors and enquiries

When you contact us through the website or by another method, we may collect:

• Your name
• Your company or organisation
• Your email address
• Your telephone number
• Information included in your enquiry
• Subsequent correspondence with you

Our hosting and security services may also process limited technical information, including:

• Your IP address
• Browser and device information
• Pages visited
• Website access, security and error information

Clients, suppliers, partners and business contacts

We may process:

• Your name and job title
• Your business contact details
• Business communications
• Project, proposal, contract and service-related information
• Records relating to our professional relationship

Please do not send sensitive personal data or highly confidential project information through the public contact form.

How we collect personal data

We may collect personal data:

• Directly from you
• From your employer or organisation
• From project partners, advisers or business contacts
• Through professional referrals
• From publicly available business sources, such as company websites and professional directories

Why we use personal data

Responding to enquiries and developing opportunities

We use personal data to respond to enquiries, understand requirements, arrange discussions, assess opportunities and prepare proposals.

Lawful basis: Legitimate interests or taking steps before entering into a contract.

Providing services and managing relationships

We may use personal data to provide services, manage projects and contracts, communicate with clients and delivery partners, and maintain appropriate business records.

Lawful basis: Contract or legitimate interests.

Operating and protecting our website

We may use technical information to operate the website, resolve problems, protect our systems and prevent misuse, fraud or security threats.

Lawful basis: Legitimate interests.

Legal and regulatory requirements

We may process personal data to meet legal, financial and regulatory obligations, respond to lawful requests, handle complaints and establish or defend legal rights.

Lawful basis: Legal obligation or legitimate interests.

Business communications

Where permitted by law, we may contact relevant business contacts about WiredLight services that may be useful to their organisation. You may ask us to stop at any time.

Lawful basis: Legitimate interests or consent where consent is required.

Our legitimate interests

Where we rely on legitimate interests, these include:

• Responding to business enquiries
• Identifying and developing appropriate opportunities
• Managing professional relationships
• Operating and protecting our business and website
• Maintaining appropriate business records
• Communicating relevant information about our services

We consider the effect of this processing on your rights and interests before relying on this lawful basis.

Who we share personal data with

Where necessary, we may share personal data with:

• WiredLight employees, directors and authorised contractors
• Website, hosting, email, cloud, IT and security providers
• Professional advisers, including legal, accounting and insurance advisers
• Consultants, subcontractors and project partners
• Regulators, courts, law-enforcement bodies or public authorities where required

We only share personal data where there is an appropriate reason. Providers processing data on our behalf must protect it and use it only for the agreed purpose. We do not sell personal data.

International transfers

Some of our technology providers or project partners may process personal data outside the United Kingdom.

Where the destination is not recognised as providing an adequate level of protection, we use an appropriate lawful safeguard where required, such as approved contractual protections for international data transfers.

How long we keep personal data

We retain personal data only for as long as reasonably required. Our usual retention periods are:

• Enquiries that do not progress: up to 24 months after our last substantive communication.
• Client, supplier, partner and project records: normally for the relationship and six years afterwards.
• Website security, access and error records: normally for up to 12 months.
• Data-protection requests and complaints: normally for six years after the matter is closed.

We may retain information for longer where required by law or for a dispute, investigation or legal claim. Information no longer required will be deleted, anonymised or securely disposed of.

Security of personal data

We use appropriate technical and organisational measures, including access controls, system security, supplier arrangements and secure storage, to protect personal data.

No website or electronic communication system can be guaranteed to be completely secure. Please do not submit sensitive or highly confidential information through the public contact form.

Cookies

This website does not intentionally use advertising or behavioural-tracking cookies. Essential technology may be used where required to operate, secure or deliver the website.

If we introduce analytics, marketing technology or other non-essential cookies, we will update this policy and provide an appropriate consent choice before using them where required.

Automated decision-making

We do not use personal data collected through this website to make decisions based solely on automated processing that have legal or similarly significant effects.

Your data-protection rights

Under UK data-protection law, you may have the right to:

• Request access to your personal data
• Ask us to correct inaccurate or incomplete information
• Ask us to delete personal data in certain circumstances
• Ask us to restrict how personal data is used
• Object to processing based on legitimate interests
• Object to direct marketing
• Request the transfer of certain personal data
• Withdraw consent where we rely on consent

These rights are subject to legal conditions and exemptions. You will not normally have to pay a fee, although we may request information to confirm your identity. We normally respond to information-rights requests within one month.

How to complain

If you are concerned about how we have handled personal data, please email info@wiredlight.net or use our contact page.

You also have the right to complain to the Information Commissioner’s Office:

Updates to this policy

We keep this policy under review and may update it when our website, services or data-processing activities change. The version and date shown at the beginning indicate when it was most recently updated.