Windlark respects your privacy and is committed to protecting your personal data. This policy explains what we collect, how we use it, and the rights you have in relation to your information.

Please read this policy carefully so you understand how and why your data is used.

1. What data do we collect?

“Personal data” means any information that can identify you as an individual.

We may collect, use, store and transfer:

– Identity data (such as your name)

– Contact details (such as email address, phone number, postal address)

– Financial information (such as bank details, where relevant)

– Usage data (how you use our website and services)

– Technical data (such as IP address, browser type, device information)

We do not collect “special category” data (such as information about your health, beliefs, ethnicity, or political opinions), and we do not collect data about criminal convictions.

If we are legally required to collect certain information and you choose not to provide it, this may affect our ability to deliver services to you.

2. How do we collect your data?

We collect data in three main ways:

– Directly from you – when you contact us, fill in a form, engage our services, or request marketing.

– Automatically – when you browse our website, we collect technical and usage data via cookies and similar technologies.

– From third parties or public sources – such as analytics providers (e.g. Google), service providers, or publicly available records (e.g. Companies House).

[We use SSL encryption on our website to help protect data sent to us.]

Information sent to us via email is not stored in a marketing database but will exist in our email systems until deleted. We use this information to respond to your enquiry and, where appropriate, for our legitimate business purposes.

You may request deletion of your data at any time by contacting us.

3. How do we use your data?

We only use your personal data when the law allows us to do so, including:

– To provide services to you and manage our relationship

– To respond to enquiries, comments, or complaints

– To operate, secure, and improve our website

– To understand how visitors use our site and content

– To develop our business and inform our marketing strategy

– To meet legal and regulatory obligations

We will never send you third-party marketing without your consent. You can withdraw marketing consent at any time by emailing .

4. Cookies

Like most websites, we use cookies. These are small text files stored on your device that help us understand how people use our site.  They allow us to collect information such as pages you visit, how long you stay on each page, how you found our site, and what you click.  [We use cookies from Google Analytics and Squarespace.]. Most browsers allow you to block or delete cookies. Doing so may affect how well the site works.

5. Who do we share your data with?

We may share your data with:

– Technical service providers

– Professional advisers

– Parties involved in a merger, sale, or reorganisation

– Authorities or partners where required by law

All third parties are required to respect your data and use it only for agreed purposes.

6. International transfers

[We use Squarespace, whose servers are based in the United States.] This means your data may be transferred outside the European Economic Area.

7. How long do we keep your data?

We keep your personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet legal obligations.

8. Your rights

You have the right to access, correct, delete, or restrict your data and to object to processing.

To exercise your rights, contact us at .

9. Data breaches

In the event of an unlawful data breach, we will notify the relevant authorities within 72 hours.

10. Third-party links

Our website may contain links to other websites. Each external site has its own privacy policy.

11. Changes to this policy

We review this policy regularly and update it as needed. Any changes will be posted on this page.

12. Final note

We take every reasonable step to protect your data. However, no system is completely secure. By providing your data, you acknowledge that this is done at your own risk.

Data Controller: Eleanor Clark Windo

April 2026