Privacy policy
Last updated 24 September 2026
We collect very little. If you fill in the contact form we get your name, email, company and message, and we use them to reply to you. We run no advertising trackers and set no analytics cookies.
1. Who we are
Willmachi Limited (“WillMachi”, “we”, “us”) is the data controller for the personal data described in this policy. We are a private limited company registered in England and Wales, company number 14540910, with its registered office at 8 Raite Green, Sittingbourne, England, ME10 5JY. Our VAT registration number is GB 516 5415 02, and we are registered with the Information Commissioner’s Office under reference ZC107807.
For anything in this policy, including any request to exercise your rights, contact info@willmachi.com or write to us at the registered office above.
We have not appointed a Data Protection Officer. We are not a public authority, our core activities do not consist of large-scale regular and systematic monitoring, and we do not process special category data at scale, so the conditions in Article 37 UK GDPR do not apply. Enquiries go to the address above.
2. What we collect, why, and on what legal basis
| What | Why | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Contact form: your name, email address, company name (optional) and the message you write | To read your enquiry, reply to it, and carry on the resulting conversation | Art. 6(1)(f) legitimate interests — responding to someone who has deliberately asked us to get in touch. Where your enquiry leads to a contract, Art. 6(1)(b) steps taken at your request before entering a contract |
| Email you send us directly, and our replies | To conduct the correspondence and keep a record of what was agreed | Art. 6(1)(f) legitimate interests — managing our business correspondence |
| Server logs kept by our hosting provider: IP address, timestamp, page requested, user agent | To serve the site, and to detect and investigate abuse, attacks and faults | Art. 6(1)(f) legitimate interests — keeping the site available and secure |
Where we rely on legitimate interests we have considered whether our interest is overridden by your interests and rights. We think it is not: the data is minimal, you supply it knowingly for a purpose you chose, we do not use it to build a profile of you, and you can object at any time (see section 7).
We do not process any special category data (Article 9) and we ask you not to send any in the contact form. We do not knowingly collect data from children; this is a business site not directed at them.
3. Cookies, analytics and tracking
This site sets no cookies. We run no advertising or profiling technology, no analytics product, no session recording and no third-party marketing pixels. Nothing is stored on or read from your device beyond what your browser does of its own accord to display the page, so regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 is not engaged and there is no consent banner to click.
Web fonts are served from our own domain at build time. Your browser does not contact a font provider when you load this site.
If we ever add analytics we will update this policy before doing so, and where the law requires consent we will ask for it first.
4. Who else sees your data
We do not sell personal data, and we do not share it for anyone else’s marketing. Your data is handled by a small number of service providers acting as our processors:
- Netlify, Inc. — hosts this website and runs the function that processes the contact form. Sees server logs and, in transit, the contents of a submitted form.
- Google LLC / Google Ireland Limited — delivers and stores the email generated by the contact form in our business mailbox.
We may also disclose personal data to our professional advisers where necessary, or where we are required to by law, a court order or a regulator. If we are ever compelled to disclose your data we will tell you unless we are legally prohibited from doing so.
5. Transfers outside the UK
The providers above are US-headquartered, so your data may be processed outside the United Kingdom. Where that happens we rely on one of the transfer mechanisms permitted by Chapter V UK GDPR:
- the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework), in force since 12 October 2023, where the receiving organisation holds a current certification under it; or
- the International Data Transfer Agreement, or the UK Addendum to the European Commission standard contractual clauses, together with a transfer risk assessment.
You can ask us which mechanism applies to a particular provider and we will tell you.
6. How long we keep it
- Contact enquiries and the correspondence that follows — 24 months from our last contact with you, then deleted. If the enquiry becomes a contract, we keep the records for the life of that contract and for six years afterwards, to meet our tax obligations and the limitation period under the Limitation Act 1980.
- Server logs — retained by our hosting provider on their standard cycle, which is a matter of weeks, and not copied into any system of ours.
7. Your rights
Under UK GDPR you have the right to:
- be told how your data is used — this policy
- get a copy of the data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict how we use it
- receive it in a portable, machine-readable form, where that right applies
- object to processing based on legitimate interests — which covers most of what we do with your data, so this is the one that matters most here
- not be subject to a decision based solely on automated processing. We make no such decisions and carry out no profiling.
Email info@willmachi.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive. We may ask you to confirm your identity before we act.
Giving us your data is entirely voluntary. There is no statutory or contractual obligation to provide it. If you would rather not use the form, email us instead — but we cannot reply to an enquiry without some way of reaching you.
8. Security
The site is served over HTTPS. The contact form is transmitted over an encrypted connection and turned into an email through an authenticated API; we do not operate a database of enquiries. Access to the mailbox is limited to people who need it and is protected by multi-factor authentication. No transmission over the internet can be guaranteed completely secure, and we would encourage you not to put anything confidential in a web form — including this one.
9. Complaints
If you are unhappy with how we have handled your data, please tell us first at info@willmachi.com so we can try to put it right.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at any time: ico.org.uk/make-a-complaint, or 0303 123 1113. Complaining to us first is not a precondition.
10. Changes
We will update this policy when what we do changes. The date at the top always reflects the current version. If a change materially affects how we use data you have already given us, we will contact you about it rather than relying on you to re-read the page.