Privacy Notice

Waymark Advisor respects your privacy and is committed to handling personal information responsibly and transparently.

This privacy notice explains how we collect and use personal information when you visit our website or contact us about our services.

1. Who we are

Waymark Advisor provides information, privacy and governance advisory services.

Waymark Advisor is the controller of the personal information described in this notice.

If you have a question about how we use your personal information or would like to exercise your data protection rights, you can contact us at: mark@waymarkadvisor.com

2. Information we collect

When you contact us

If you submit an enquiry through our website, including a request for urgent support through our SOS page, we collect:

• your name;
• your email address;
• your organisation, if you choose to provide it; and
• the information you include in your message.

If you are contacting us about a data breach, complaint or other urgent issue, please provide only the information needed to give us an initial understanding of the situation. Do not include passwords, copies of affected personal data or other highly sensitive information in the initial enquiry.

If you contact us directly by email, we will also receive the information contained in your email and any subsequent correspondence.

Please avoid including unnecessary sensitive or confidential information in an initial enquiry.

When you use our website

Like most websites, limited technical information may be processed when you access the site. This can include your IP address, browser or device information, the pages requested and the date and time of the request.

This information is processed as part of the hosting, security and operation of the website.

3. How we use your information

We use personal information to:

• receive and respond to enquiries;
• understand the nature of the challenge or support you are looking for;
• arrange and conduct an initial conversation;
• communicate with you about a potential engagement;
• prepare proposals or other information you request;
• maintain appropriate business correspondence;
• operate and protect our website and systems; and
• comply with legal obligations or establish, exercise or defend legal claims where necessary.

Submitting an enquiry does not commit you to purchasing services from Waymark Advisor.

We do not use information submitted through the enquiry form to add you to a marketing mailing list.

4. Our lawful bases

We process personal information only where we have a lawful basis to do so.

When you contact Waymark Advisor about our services, we will generally rely on our legitimate interests in responding to enquiries, communicating with prospective clients and operating our business.

Where you are considering entering into a contract with Waymark Advisor personally, we may process information where necessary to take steps at your request before entering into a contract.

We may also process personal information where necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

Where we rely on legitimate interests, our interests are in operating and developing Waymark Advisor, responding to people who approach us about our services and maintaining appropriate business relationships. We consider these interests against the rights and interests of the people whose information we process.

5. How website enquiries are handled

Our website enquiry form is designed to collect only the information needed to understand and respond to your enquiry.

When you submit the form, the information you provide is processed securely on the server and sent by email to Waymark Advisor. An acknowledgement email is also sent to the email address you provide.

We use Lovable to provide website infrastructure and managed email delivery. Lovable therefore processes information submitted through the form on our behalf.

We do not maintain a separate website database of enquiry submissions.

Information received by email is subsequently handled as part of Waymark Advisor's normal business correspondence.

6. Who we share information with

We do not sell your personal information.

We use service providers where necessary to operate our website, email and business systems. These providers may process personal information on our behalf.

For the website, this currently includes Lovable, which provides website infrastructure and managed email delivery.

We may also disclose personal information where required by law, regulation or a competent authority, or where necessary to establish, exercise or defend legal claims.

7. International processing

Some of the service providers and infrastructure used to operate our website may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps to ensure that an appropriate mechanism or safeguard is in place where required by data protection law.

For services provided by Lovable, this may include recognised adequacy arrangements or contractual safeguards such as Standard Contractual Clauses together with the UK International Data Transfer Addendum, as appropriate.

You can contact us at mark@waymarkadvisor.com if you would like further information about the safeguards applying to your personal information.

8. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, regulatory or business requirements.

If you make an enquiry that does not result in an engagement, we will normally retain the enquiry and associated correspondence for 12 months after our last substantive contact.

If you become a client, information relating to the engagement will be retained in accordance with our client and business record retention requirements.

Technical and security information associated with operation of the website may be retained for different periods appropriate to its purpose.

9. Cookies and website storage

We do not currently use cookies for analytics, advertising or tracking, and the website does not currently use analytics or advertising technologies.

The website uses limited browser session storage to support normal functionality, such as restoring your position when navigating between pages. This does not contain an identifier and is cleared when the browser session ends.

Our hosting infrastructure may also process standard technical information necessary to deliver and protect the website.

If the technologies used by the website change, we will review and update this notice and introduce consent controls where required.

10. Your data protection rights

Depending on the circumstances, you may have rights over your personal information, including the right to:

• ask for a copy of personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your personal information in certain circumstances;
• ask us to restrict how we use your information in certain circumstances;
• object to certain uses of your personal information; and
• receive certain personal information in a portable format where the relevant legal requirements apply.

These rights are not absolute and whether a particular right applies will depend on the circumstances and our lawful basis for processing.

To exercise a right, contact mark@waymarkadvisor.com.

Your right to object

Where we process your personal information on the basis of our legitimate interests, you have the right to object to that processing in certain circumstances.

Contact mark@waymarkadvisor.com if you wish to object.

11. Complaints

If you have a concern about how we use your personal information, we would welcome the opportunity to address it. Please contact mark@waymarkadvisor.com.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Link Information Commissioner's Office (ICO)

12. Changes to this notice

We may update this privacy notice when our services, website or use of personal information changes.

The latest version will be published on this website and the date at the top of the notice will show when it was last updated.