Privacy Policy

Last updated: 2 January 2026

1. Introduction

Wltr ("we", "us", "our") is operated by Studio Riggall Ltd, a company registered in England and Wales. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website wltr.uk and use our services.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Studio Riggall Ltd
Email: [email protected]

3. Information We Collect

3.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Book a demo via Calendly (name, email, phone number, business details)
• Sign up for our service (business name, contact details, tenant information)
• Contact us via email
• Use our platform (tenant data, referral information, transaction records)

3.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent
• Referring website
• Device information

3.3 Third-Party Data Collection

We use the following third-party services that may collect data:

• Calendly: Demo booking information
• Vercel: Website hosting and analytics
• Resend: Email communications

4. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Process your subscription and payments
• Communicate with you about our service
• Respond to your enquiries
• Send service updates and marketing communications (with your consent)
• Improve our website and service
• Comply with legal obligations
• Detect and prevent fraud

5. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Contract: To provide our services to you
• Consent: For marketing communications (you can withdraw at any time)
• Legitimate Interests: To improve our service and prevent fraud
• Legal Obligation: To comply with tax and accounting requirements

6. Data Retention

We retain your personal data only for as long as necessary:

• Active customers: Duration of subscription plus 7 years (for tax/accounting purposes)
• Demo enquiries: 2 years from last contact
• Marketing contacts: Until you unsubscribe or request deletion
• Website analytics: 26 months

7. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

7.1 Service Providers

• Vercel: Website hosting (USA - adequate safeguards in place)
• Resend: Email delivery (EU/UK)
• Calendly: Demo scheduling (USA - adequate safeguards in place)
• Payment processors: To process subscription payments

7.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority.

7.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different Privacy Policy.

8. International Data Transfers

Some of our service providers are based outside the UK/EU. Where we transfer data internationally, we ensure adequate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK authorities
• Adequacy decisions for countries with equivalent data protection
• Other appropriate safeguards under UK GDPR

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• SSL/TLS encryption for data in transit
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Your Rights (UK GDPR)

Under UK GDPR, you have the following rights:

10.1 Right of Access

You can request a copy of the personal data we hold about you.

10.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

10.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, subject to legal obligations.

10.4 Right to Restrict Processing

You can request that we limit how we use your data.

10.5 Right to Data Portability

You can request your data in a machine-readable format.

10.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing.

10.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

11. Cookies

Our website uses minimal cookies:

• Essential cookies: Required for the website to function
• Analytics cookies: To understand how visitors use our site (with your consent)

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

12. Marketing Communications

With your consent, we may send you marketing emails about our service. You can unsubscribe at any time by:

• Clicking the unsubscribe link in any email
• Emailing us at [email protected]

13. Children's Privacy

Our service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending an email to registered users

15. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with:

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: