W'A.I Studios Ltd (“W'A.I”, “we”, “us”) is a company registered in England and Wales under company number 16612775, and registered with the Information Commissioner's Office as a data controller under registration ZC031208. Our registered office and operating base is in London, United Kingdom.
We are the data controller for personal data collected through this website. If you have any question about this policy or about how we handle your data, contact us at privacy@w-ai.co.uk.
We keep data collection deliberately narrow. There are three sources.
We do not knowingly collect special category data (health, ethnicity, political opinions, biometrics and similar), and we do not ask for it. We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.
- Responding to enquiries. Where you contact us about work or a project, we rely on legitimate interests; it is in both our interests that we can reply to you and follow up. Where the enquiry leads to an engagement, we may also rely on performance of a contract or steps taken at your request before entering one.
- Site analytics and service improvement. We rely on legitimate interests in understanding how the site is used so we can improve it, keep it secure and measure whether it works. Where analytics are delivered through non-essential cookies or similar technologies, we set those only with your consent.
- The engine. We log questions to improve routing, coverage and the quality of answers, relying on legitimate interests in operating and improving our own service.
- Non-essential cookies. Consent, which you can withdraw at any time. See our Cookie Policy.
- Legal and security obligations. Where we must keep records or investigate misuse, we rely on legal obligation or legitimate interests in protecting our systems.
Where we rely on legitimate interests, we have considered whether our interests are overridden by your rights and freedoms, and we have limited what we collect accordingly. You can object to that processing, see your rights below.
The engine is the conversational assistant on this site. Please read this section before using it.
- Answers are AI-assisted. Responses are generated with the help of AI models grounded in W'A.I's own material. They can be incomplete, out of date or wrong, and they are guidance rather than professional, financial or legal advice. Check anything important with a human before acting on it.
- Please don't submit sensitive personal data. Do not type health information, financial account details, identity document numbers, passwords, confidential client material or anyone else's personal data into the engine. It is a general enquiry tool, not a secure channel.
- Questions are logged. We store the question text and the intent category so we can improve routing, spot gaps in our content and see what people actually need. Aggregate, de-identified counts may be used in internal reporting.
- Human review. Where the engine cannot answer a question, or where an answer looks poor, a member of the W'A.I team may read the question and follow it up. If you have left contact details, we may use them to reply.
- No third-party model training without consent. We do not permit prompts or engine conversations to be used to train third-party AI models. Where we use a third-party model provider, we do so under terms that exclude training on our inputs and outputs, unless you have separately and explicitly consented.
We keep personal data only for as long as we have a reason to, then delete or anonymise it.
We do not sell, rent or trade personal data. We share it only where we need to, and only with:
- Service providers acting as processors: including our website hosting provider, email and productivity platform, analytics provider, AI model provider and any form or CRM tooling we use. Each acts on our documented instructions under a written data processing agreement.
- Professional advisers, such as accountants or lawyers, where necessary and confidential.
- Authorities or third parties: where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend legal claims.
We describe these categories generically rather than naming vendors, because our supplier set can change. A current list of the processors we use is available on request from privacy@w-ai.co.uk.
Some of our providers process data outside the United Kingdom. Where personal data is transferred outside the UK, we make sure an appropriate safeguard is in place: an adequacy decision or adequacy regulations covering the destination country, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses together with the UK Addendum, supported by a transfer risk assessment where required.
You can ask us for details of the safeguards applying to a particular transfer.
Under UK GDPR you have the following rights in relation to your personal data.
- Access, ask for a copy of the personal data we hold about you.
- Rectification, ask us to correct data that is inaccurate or incomplete.
- Erasure, ask us to delete data where we no longer have a good reason to hold it.
- Restriction, ask us to pause processing while a concern is resolved.
- Objection: object to processing carried out on the basis of legitimate interests, including profiling, and object at any time to direct marketing.
- Portability: receive data you provided to us in a structured, commonly used, machine-readable format, or have it sent to another controller, where processing is based on consent or contract and is automated.
- Withdraw consent, where we rely on consent, withdraw it at any time. This does not affect processing carried out before withdrawal.
- Complain: lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk, by phone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
To exercise any of these rights, email privacy@w-ai.co.uk. We will respond within one month. There is no fee, though we may ask you to verify your identity and, for manifestly unfounded or excessive requests, we may charge a reasonable fee or decline. We would always rather hear from you first, but you can go straight to the ICO if you prefer.
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and a small number of people with access. No system is perfectly secure, and we cannot guarantee the security of data transmitted over the internet.
This site is not directed at children, and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with data, contact us and we will delete it.
We may update this policy as the site, the engine or the law changes. The current version is always the one published here, with the last-updated date shown at the top. Material changes will be flagged on the page.
Status: Draft template. To be reviewed by Kris and, where needed, a solicitor before publication. Processor names, retention periods and transfer mechanisms must be confirmed against the live stack before this page goes public.