Privacy Policy

1. Who we are

The Wonderland Consultancy Limited is the controller responsible for the personal information covered by this Privacy Policy.

If you have a question about this Privacy Policy or how we use your personal information, you can contact us using the contact details published on our website.

2. The information we collect

Depending on how you interact with us, we may collect:

• Identity and contact information, such as your name, job title, company, email address and telephone number.
• Enquiry and correspondence information, including information you provide when you contact us through our website, by email or through another communication channel.
• Business information you choose to share with us in connection with an enquiry or potential engagement.
• Technical and usage information, such as IP address, browser type, device information, pages visited, referring pages and information about how the website is used, where this is collected by our website, hosting or analytics services.
• Cookie and preference information, including choices you make through any cookie consent controls on our website.

Please avoid sending sensitive personal information through a general website enquiry unless it is genuinely necessary.

3. How we collect information

We may collect personal information:

• directly from you when you contact us, submit an enquiry or communicate with us;
• when you use or browse our website;
• through cookies and similar technologies, subject to applicable consent requirements;
• from organisations you work for or represent; and
• from publicly available professional or business sources where appropriate.

We only seek to collect information that is relevant to the purpose for which it will be used.

4. How we use your information

We may use personal information to:

• respond to enquiries and communicate with you;
• discuss, prepare for or provide our consultancy services;
• manage our business relationships;
• operate, secure, maintain and improve our website;
• understand how visitors use our website, where analytics have been enabled and any required consent has been obtained;
• maintain appropriate business and administrative records;
• establish, exercise or defend legal rights;
• comply with legal, regulatory, tax and accounting obligations; and
• send relevant business communications or marketing where we are permitted to do so.

We do not sell your personal information.

5. Our lawful bases for using personal information

Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the circumstances, we may rely on:

6. Marketing

We may occasionally contact business contacts about the wonderland, our services, thinking or other information we believe may be relevant, where permitted by law.

Where consent is required, we will ask for it. You can opt out of marketing communications at any time by using an unsubscribe option provided in the communication or by contacting us.

Opting out of marketing will not prevent us from sending non-marketing communications that are necessary in connection with an enquiry, engagement or existing business relationship.

7. Cookies and analytics

Our website may use cookies and similar technologies for essential website functionality, security, preferences and, where enabled, analytics.

Where the law requires consent before a technology is used, it will not be activated until you have made the relevant choice through our cookie controls.

Further information about the technologies used on the website, their purposes and how you can manage your choices is provided in our Cookie Policy.

8. Who we share information with

We may share personal information where reasonably necessary with trusted service providers that support our business, such as website hosting and technology providers, professional advisers, email and communications providers, analytics providers and other suppliers involved in operating our business.

We may also disclose information where required by law, regulation, a court or a competent authority, or where necessary to protect our legal rights.

Where another organisation processes personal information on our behalf, we take appropriate steps to ensure that the information is handled securely and in accordance with applicable data protection requirements.

We do not sell personal information to third parties.

9. International transfers

Some technology or service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place where required by UK data protection law.

10. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to manage enquiries and business relationships and to satisfy legal, accounting or reporting requirements.

The appropriate retention period depends on the nature of the information, why we hold it and any relevant legal or commercial requirements. When information is no longer required, we will delete or securely dispose of it where appropriate.

11. How we protect your information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

However, no website, email system or internet transmission can be guaranteed to be completely secure. You should take appropriate care when sending information electronically.

12. Your data protection rights

Depending on the circumstances, UK data protection law may give you rights to:

• ask for access to the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete personal information in certain circumstances;
• ask us to restrict how we use personal information;
• object to certain processing, including direct marketing;
• receive certain information in a portable format;
• withdraw consent where we rely on consent; and
• complain about how your personal information has been handled.

These rights are subject to legal conditions and exemptions. If you wish to exercise a right, please contact us using the contact details published on our website.

13. Complaints

If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to address them.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection.

14. Third-party websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy information provided by any external website or service you use.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, business, technology or legal requirements.

The latest version will be published on our website and the date at the top will show when it was last updated.

16. Contact us

If you have questions about this Privacy Policy, want to exercise a data protection right or have a concern about how your information is handled, please contact us using the contact details published on our website or write to: