Privacy Policy

Data Controller: Wove Digital

Contact: Thomas Walmsley & Luke Bentley

Email: admin@wovedigital.co.uk

Address: London, United Kingdom

ICO Registration: We are registered with the Information Commissioner's Office (ICO) as required under UK GDPR.

As a data controller, we determine the purposes and means of processing your personal data. This privacy policy explains how we collect, use, and protect your information when you use our website or services.

We may share your data with carefully selected third parties:

• Contact Inquiries: 2 years from last contact (unless you become a client)
• Client Project Data: 7 years after project completion (for legal and tax requirements)
• Website Analytics: 26 months (automatically deleted)
• Marketing Communications: Until you unsubscribe or object

We regularly review our data retention and securely delete information when it's no longer necessary. You can request early deletion at any time, subject to our legal obligations.

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, email us at admin@wovedigital.co.uk. We'll respond within one month and may request identity verification for security.

We implement comprehensive security measures including:

• Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Multi-factor authentication and role-based permissions
• Regular Audits: Security assessments and penetration testing
• Staff Training: Regular data protection and security awareness training
• Incident Response: 72-hour breach notification procedures to ICO

Despite our security measures, no system is 100% secure. We'll notify you and the ICO of any data breaches that pose a risk to your rights and freedoms.

When delivering AI consulting services, please note:

• Human Oversight: All AI-generated recommendations require human verification
• No Automated Decisions: We don't make automated decisions that significantly affect you
• Bias Awareness: We actively monitor for and mitigate potential algorithmic bias
• Explainability: We provide clear explanations of AI system recommendations
• Client Data: Your data used for AI training is anonymized and aggregated only

We may update this privacy policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via:

• Email notification to active clients
• Prominent website notice for 30 days
• Updated "last modified" date at the top of this policy

Your continued use of our services after changes constitute acceptance of the updated policy.

For any privacy-related questions or concerns:

• Email: admin@wovedigital.co.uk
• Response Time: Within 4 business hours during UK working days

Wove Digital maintains professional indemnity insurance covering data protection liabilities. Our coverage includes protection for data processing errors, security breaches, and AI-related risks in our consulting services.

We are committed to maintaining the highest standards of professional practice in data protection and AI consulting, with regular training and certification updates for all team members.