Privacy Policy
This Privacy Policy explains how Wonastow collects, uses, stores and protects personal information when you visit our website or use our services. This is a general template provided for informational purposes and should be reviewed and adapted to reflect your actual data practices and applicable law before use.
Last updated: [Insert date]
1. Who We Are
Wonastow ("we", "us", "our") provides AI-assisted data analysis tools intended to support first-time investors in the United Kingdom. This policy applies to all personal data processed through our website, applications, and related services (collectively, the "Service").
For questions about this policy or our data practices, please use the contact details provided on our Contact page.
2. Information We Collect
We collect information in the following categories:
- Account and contact information — such as your name, email address, and phone number, provided when you register, submit a form, or contact us.
- Financial and investment-related inputs — information you choose to provide for the purpose of generating analysis or recommendations, including risk tolerance, investment goals, and portfolio details.
- Technical and usage data — such as IP address, browser type, device identifiers, pages visited, and interaction data, collected automatically through standard web technologies.
- Communications — records of correspondence between you and Wonastow, including support requests and feedback.
3. How We Use Your Information
We use collected information for purposes including:
| Purpose | Description |
|---|---|
| Service delivery | Operating, maintaining, and providing the features of the Service, including generating analysis outputs. |
| Account management | Creating and administering user accounts, authentication, and related support. |
| Communication | Responding to enquiries, sending service-related notices, and optional marketing communications where consented. |
| Improvement and analytics | Understanding usage patterns to improve functionality, performance, and reliability. |
| Legal compliance | Meeting applicable legal, regulatory, or contractual obligations. |
4. Legal Basis for Processing
Where applicable data protection law requires a legal basis, we rely on one or more of the following: your consent, the necessity of processing to perform a contract with you, our legitimate interests in operating and improving the Service, and compliance with legal obligations. Where we rely on legitimate interests, we aim to balance these against your rights and expectations.
5. How We Share Information
We do not sell personal information. We may share information with:
- Service providers and subprocessors who support hosting, analytics, communications, or payment processing, bound by confidentiality and data protection obligations.
- Professional advisers, such as legal or compliance consultants, where necessary.
- Regulatory or governmental authorities, where required by law or to protect our legal rights.
- A successor entity in connection with a merger, acquisition, or sale of assets, subject to equivalent protections.
6. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, including any legal, accounting, or reporting obligations. Retention periods vary depending on the type of data and the context in which it was collected. When information is no longer required, we take reasonable steps to delete or anonymise it.
7. Security Measures
We apply technical and organisational measures intended to protect personal information against unauthorised access, loss, or misuse, including encryption of data in transit, access controls, and regular review of our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support functionality, remember preferences, and gather usage analytics. You can control cookie preferences through your browser settings; disabling certain cookies may affect the functionality of the Service.
9. International Transfers
Where personal information is transferred outside of the United Kingdom or the jurisdiction in which it was originally collected, we aim to ensure that appropriate safeguards are in place, consistent with applicable data protection requirements.
10. Your Rights
Depending on applicable law, you may have rights in relation to your personal information, which can include the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal information, subject to legal exceptions.
- Object to or restrict certain types of processing.
- Request a portable copy of your information.
- Withdraw consent where processing is based on consent.
To exercise any of these rights, please contact us via the details on our Contact page. We may need to verify your identity before responding to a request.
11. Children's Privacy
The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so that we can take appropriate action.
12. Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties, and we encourage you to review their respective privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be indicated by updating the "Last updated" date at the top of this page. Continued use of the Service following any update constitutes acceptance of the revised policy.
General notice: This Privacy Policy is a general-purpose template intended to outline standard privacy practices. It does not constitute legal advice, and it has not been prepared or reviewed for compliance with any specific jurisdiction's data protection laws, including UK GDPR or the Data Protection Act 2018. Wonastow recommends that this document be reviewed by a qualified legal professional before being relied upon for operational use. Any contact details, retention periods, or procedures referenced should be confirmed and completed with accurate, current information.