Effective 20 September 2026

Privacy policy

A page with a clear edge

Wontle keeps this policy in the same spirit as its working records: a reader should be able to see what is being handled, why it is needed and where a question goes. WONTLE LTD is the controller for correspondence about its own work. Its company number is 234619131.

The two hats

When Wontle answers a direct enquiry, it decides the purpose and means of using that message. That is the controller role. If a separate engagement asks Wontle to handle a client register on written instructions, the company can be a processor for that register and controller for its own billing, scheduling and relationship notes. Instructions are kept in the engagement record.

What a letter can contain

A sender may choose to include a name, an address for reply, a role, the wording of a question and attachments. A browser also sends a time, a requested page, a user-agent string and a network address. The public pages do not ask a visitor to open an account or volunteer a special category of information.

Reasons for keeping a line

Wontle uses messages to answer a request, prepare a conversation, keep a decision record and protect the website. The lawful basis is usually steps requested by the sender, a legitimate interest in running a reliable service, or a legal obligation. Consent is used only when the page asks for it and a person can change their mind.

When a note leaves the desk

Email hosting, domain registration, website delivery and professional advisers may receive a narrow copy of a record. Each recipient has a defined task. Wontle does not sell a correspondence list or turn a question into an advertising profile.

Retention, time and deletion

Working correspondence is reviewed when the discussion closes. A useful record can be kept for a further period where it explains an agreement; accounting material follows the statutory period. Security logs are short-lived. A person can request account deletion or erasure by writing to hello@wontle.co.uk, even though this public site does not require an account. A legal hold or a duty to keep a record can limit deletion, and the reply will explain that reason.

Outside the UK

If a supplier handles information from another country, Wontle uses an adequacy decision or a recognised transfer instrument such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the Standard Contractual Clauses. The destination and safeguards are recorded with the supplier decision.

An incident

A suspected breach is logged, contained and assessed. Where the risk threshold is met, the company reports to the Information Commissioner’s Office within 72 hours of awareness and contacts affected people when required. A processor sends the relevant controller a notice without undue delay.

Rights and younger readers

A person may ask for access, correction, erasure, restriction, objection or portability where the UK GDPR provides the right. Identity may be checked, and a response is normally due within one month. The site is not directed to children; a parent or guardian can write if a child has sent information.

A human route

Questions about this policy go to hello@wontle.co.uk. A complaint can be taken to the ICO at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113. The company may revise this page when its practice or the law changes.