Last updated: 15 October 2026

What this policy covers

www.wealden.net (the “Site”) is owned and operated by Wealden Computing Services Limited, a company registered in England and Wales (company number 05759833), trading as Wealden (“Wealden”, “we”, “our” or “us”). We are the controller of the personal information we collect through the Site. This Privacy Policy explains our policies and procedures regarding the collection, use and disclosure of personal information we receive from visitors to the Site and from people who contact us through it. If you have any questions on this policy, please see the “How you can contact us” section below.

This Privacy Policy applies only to information that you provide to us through the Site, or that we collect when you use it, and is intended to help you understand:

• What information we collect about you
• Purposes for which we may process your information
• What is the lawful basis for processing personal information?
• What information do we disclose to third parties?
• How we store and secure the information we collect
• How long we retain information
• How you can access and control your information
• How we transfer information we collect internationally
• Changes to our Privacy Policy
• How you can contact us and how to complain

This Privacy Policy does not cover personal information that we process on behalf of our clients when providing our HR, payroll and related services (for example, employee and payroll data processed through our software or bureau services). In those cases we act as a processor for our client, and that information is handled in accordance with our contract with the client and the client’s own privacy notice.

The Site is intended for business users and is not directed at children.

Throughout this Privacy Policy, we use the term “personal information” to describe information that can be associated with you. We do not consider personal information to include information that has been made anonymous or aggregated so that it cannot be used, whether in combination with other information or otherwise, to identify you.

What information we collect about you

We collect information about you when you provide it to us, when you access our content or use the Site, and occasionally from other sources, as further described below.

Information you provide to us

We may obtain your personal information when you provide it to us through the Site. This includes when you:

• Request a demo, download content or complete a web form: for example, your name, job title, company name, email address and telephone number, and any details you choose to include in your message.
• Subscribe to our newsletters or marketing updates: your contact details and your marketing preferences.
• Contact us by email, telephone, or other means: including the content of your communications with us.

Information we collect automatically when you use our Site

• Your use of the Site. This information includes the pages you visit, search terms you may use to find content on the Site and how you interact with content.
• Device and connection information. We collect information about the device you use to access our Site. This information includes your IP address, browser type and version, device type, operating system, referral URL and standard web log information.
• Cookies and similar technologies. The Site only uses cookies that are strictly necessary for it to work securely, such as the Google reCAPTCHA cookie that protects our contact forms from spam. We do not use analytics or advertising cookies. If we start using cookies that are not strictly necessary, we will ask for your consent first, in line with the Privacy and Electronic Communications Regulations 2003 (PECR). For more detail, please see our Cookie Policy at www.wealden.net/cookies-policy.

Information we receive from other sources

We may receive business contact information about you from publicly available sources (such as LinkedIn or Companies House) or from event organisers and business partners where you have agreed to this, to help us identify organisations that may be interested in our services.

Purposes for which we may process your information

We may process personal information for the following purposes: responding to your enquiries and providing the information, demonstrations and proposals you request; communicating with you; marketing our services to current and prospective clients where permitted; maintaining and improving the Site; managing our IT systems; financial management; conducting surveys; ensuring the security of our systems; conducting investigations where necessary; and compliance with applicable law.

The specific purposes for which we use the information we collect about you are:

• To respond to you and provide access to our content and services.
• For safety and security. This includes to prevent, detect, and investigate fraud, security breaches, and potentially prohibited or illegal activities, and to enforce our Terms & Conditions.
• To improve the Site. We are always looking for ways to make our content and services smarter, faster, more secure, and more useful to you. This includes reviewing feedback you give us and our standard web server logs.
• To communicate with you about our services. We use your contact information to respond to your enquiries, resolve problems with the Site, and send you service-related messages.
• To send you marketing about our services. We may use your contact information to send you information about our products, services, events and offers that we think may interest you, based on your communication preferences and in compliance with PECR. Where you are an individual subscriber (including a sole trader or partnership), we will only send you electronic marketing with your consent, or where you have previously enquired about similar services and have not opted out. You can unsubscribe at any time. We do not pass your details to third parties for their own marketing.
• To protect our legitimate business interests and legal rights. We may disclose information about you to government or law enforcement officials or private parties where obligatory or appropriate to respond to claims and legal process (including but not limited to court orders), to protect our property and rights or those of a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, unethical or legally actionable. Where we believe it is necessary to protect our legal rights, interests and the interests of others, we use information about you in connection with legal claims, compliance, regulatory, and audit functions, and disclosures in connection with the acquisition, merger or sale of a business.
• With your consent: We use information about you where you have given us consent to do so for a specific purpose not listed above.

What is the lawful basis for processing personal information?

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025) and PECR. We may process your personal information where you have given your consent; the processing is necessary for a contract between you and us; the processing is required by applicable law; the processing is necessary to protect the vital interests of any individual; or where we have a valid legitimate interest in the processing.

In processing your personal information in connection with the purposes set out in this Policy, we may rely on one or more of the following legal bases, depending on the circumstances:

Consent: We may process your personal information where we have obtained your prior, express consent to the processing (this legal basis is only used in relation to processing that is entirely voluntary – it is not used for processing that is necessary or obligatory in any way);

Contractual necessity: We may process your personal information where the processing is necessary to fulfil a contract that you may enter with us, or to take steps at your request before entering into one.

Compliance with applicable law: We may process your personal information where the processing is required by applicable law.

Vital interests: We may process your personal information where the processing is necessary to protect the vital interests of any individual; or

Legitimate interests: We may process your personal information where we have a legitimate interest in carrying out the processing for the purpose of managing, operating or promoting our business (including direct marketing and keeping our systems secure), and that legitimate interest is not overridden by your interests, fundamental rights, or freedoms.

EU GDPR (for EEA users): If you are an individual in the European Economic Area (EEA), the EU General Data Protection Regulation may also apply. The legal bases depend on the services you use and how you use them. This means we collect and use your information only where:

• We need it to respond to your enquiries and provide you with our services, including customer support, and to protect the safety and security of the Site.
• It satisfies a legitimate interest (which is not overridden by your data protection interests), such as to market and promote our services and to protect our legal rights and interests.
• You give us consent to do so for a specific purpose; or
• We need to process your data to comply with a legal obligation.

If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. Where we are using your information because we or a third party (e.g. your employer) have a legitimate interest to do so, you have the right to object to that use though, in some cases, this may mean we are unable to continue providing some services to you.

What information do we disclose to third parties?

We may disclose your personal information to other entities for legitimate business purposes (including operating the Site and providing services to you), in accordance with applicable law. We do not sell your personal information. In addition, we may disclose your personal information to:

• Third-Party Sites via Links: The Site may include links that direct you to other websites or services whose privacy practices may differ from ours. Your use of and any information you submit to any of those third-party sites is governed by their privacy policies, not this one.
• Partners: Where you ask us to put you in touch with, or to deliver a service together with, one of our software or consultancy partners, we may share your contact details and the details of your enquiry with that partner.
• Service Providers: We work with third-party service providers to provide website development, hosting, maintenance, email, customer relationship management, backup, storage, IT support and other services for us, which may require them to access or use information about you. If a service provider needs to access information about you to perform services on our behalf, they do so under a written contract and under instruction from us, including abiding by policies and procedures designed to protect your information.
• Digital Marketing Service Providers: We periodically appoint digital marketing agencies to conduct marketing activity on our behalf. They act on our instructions and under a written contract that requires them to protect your information.
• Professional Advisers: Our lawyers, accountants, auditors and insurers, where necessary for the purposes of the advice or services they provide to us.
• Legal and Regulatory Authorities: Upon request, where required by law, or for the purposes of reporting any actual or suspected breach of applicable law or regulation.
• Providers of Third-Party Widgets: This includes social media links and features (such as LinkedIn), Google reCAPTCHA on our contact forms, and embedded content such as maps, videos or web fonts, which may collect your IP address and which page you are visiting on the Site, and may set a cookie to enable the feature to function properly. Your interactions with these features are governed by the privacy policy of the company providing them.
• Business Transfers: A prospective or actual buyer, investor or successor if we sell, merge or restructure all or part of our business, subject to appropriate confidentiality protections.

How do we store and secure the information we collect?

We apply technical, administrative, and organisational security measures to protect the data we collect against accidental or unlawful destruction and loss, alteration, unauthorised disclosure or access.

Information storage and security

The Site and the information we collect through it are hosted by service providers in the United Kingdom. Access to personal information is restricted to staff and service providers who need it, and is protected by measures such as encryption in transit, access controls and regular backups.

How long we retain information

We take every reasonable step to ensure that your personal information is only retained for as long as it is needed for the purposes set out in this Policy, including to meet any legal, accounting or reporting requirements. As a guide:

• Enquiry and contact information: up to 2 years from our last contact with you, unless you become a client.
• Marketing information: until you opt out of communications or specifically ask us to delete such information. We keep a minimal suppression record so that we do not contact you again.
• Information relating to a contract with you: six years after the contract ends, in line with UK limitation periods.

How you can access and control your information

You may review, update, correct or delete your personal information by contacting us at support@wealden.net.

Under UK data protection law (and, where applicable, the EU GDPR) you have several rights. We further explain these rights below.

Right of access:  You have the right at any time to ask us for a copy of the personal information that we hold about you, and to check that we are lawfully processing it.

Right of rectification:  If personal information that we hold about you is not accurate or is out of date and requires amendment or correction you have a right to have the data rectified or completed.

Right of erasure: In certain circumstances, you have the right to request that personal information we hold about you is erased (e.g. if the information is no longer necessary for the purposes for which it was collected or processed).

Right to object to or restrict processing: In certain circumstances, you have the right to object to, or ask us to restrict, our processing of your personal information. For example, if we are processing your information based on our legitimate interests, and there are no compelling legitimate grounds for our processing which override your rights and interests. You have an absolute right to object to direct marketing.

Right of data portability: In certain instances, you have a right to receive any personal information that we hold about you in a structured, commonly used, and machine-readable format.

Right to withdraw consent: In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. You can exercise this right by emailing support@wealden.net.

Automated decision-making: We do not use the personal information collected through the Site to make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

We will respond to your request within one month of receiving it. Where a request is complex, or we receive a number of requests, we may extend this by up to two further months and will tell you why. We may need to verify your identity before acting on a request, and we will not usually charge a fee.

Opt-out of communications

We also use your personal information to contact you with email newsletters, marketing or promotional materials and other information that may be of interest to you. If you decide at any time that you no longer wish to receive these emails, please use the unsubscribe link provided in the emails. Alternatively, please email your removal request to support@wealden.net.

Deleting your information

If you would like to request the deletion of your information, please contact us at support@wealden.net and we will respond to your request within one month.

Cookie controls

You can control and delete cookies through your browser settings. Please see our Cookie Policy for more information.

How we transfer information we collect internationally

Because of the international nature of our business, some of our staff and service providers are located outside the United Kingdom, so we may need to transfer your personal information to, or allow it to be accessed from, other countries in connection with the purposes set out in this Policy. These countries may have different laws and data protection compliance requirements to those that apply in the country in which you are located.

Where we transfer personal information outside the United Kingdom, we make sure it is protected by transferring it to a country that the UK recognises as providing an adequate level of protection, or by using the International Data Transfer Agreement or International Data Transfer Addendum approved under UK data protection law, or another safeguard permitted by that law. You can ask us for more information about the safeguards we use.

Changes to our Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to our information practices or to the law. The date at the top of this Policy shows when it was last updated. Where changes are significant, we will take reasonable steps to let you know, for example by a notice on the Site.

How you can contact us

If you have any comments, questions, or concerns about any of the information in this Policy, or any other issues relating to the processing of personal information carried out by us, or on our behalf, please contact:

Wealden Computing Services Limited (trading as Wealden),

Nova North,

11 Bressenden Place,

London. SW1E 5BY.

Company registration number:  05759833

ICO registration number: Z1025668

Email: support@wealden.net

Telephone: +44 (0)20 8364 7177

How to complain

If you are unhappy with how we have handled your personal information, please contact us first using the details above. We will acknowledge your complaint within 30 days and respond to it without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at www.ico.org.uk or on 0303 123 1113.