Privacy Policy

Last updated: 1 April 2025

1. Introduction

WEMELT is a trading name of Wartens Ltd, a company registered in England & Wales. We are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website (wemelt.io), use our services, or communicate with us.

2. Data Controller

The data controller responsible for your personal data is:

3. What Personal Data We Collect

We may collect and process the following personal data:

• Identity data: Full name
• Contact data: Email address, phone number, postal address
• Technical data: IP address, browser type and version, operating system, time zone, referral source
• Usage data: Pages visited, time spent on pages, navigation paths
• Communication data: Messages sent via the contact form, email correspondence, uploaded files
• Transaction data: Order details, project specifications, payment records

4. How We Collect Your Data

We collect personal data through:

• Direct interactions: When you fill in our contact form, send us an email, phone us, or place an order
• Automated technologies: When you browse our website, we may automatically collect technical data using cookies and similar technologies (see our Cookie Policy)
• Third parties: We may receive data from analytics providers (e.g., Google Analytics), payment processors, and advertising platforms

5. Lawful Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

Purpose	Lawful Basis
Responding to enquiries and providing quotes	Legitimate interest / Pre-contractual steps
Fulfilling orders and delivering services	Performance of a contract
Sending marketing communications	Consent (opt-in)
Website analytics and improvement	Legitimate interest
Setting non-essential cookies	Consent
Legal compliance and fraud prevention	Legal obligation

6. How We Use Your Data

We use your personal data to:

• Respond to your enquiries and provide quotations
• Process and fulfil your orders
• Communicate with you about your projects
• Send you marketing communications (only with your explicit consent)
• Improve our website and services through analytics
• Comply with legal and regulatory obligations

7. Data Sharing

We do not sell your personal data. We may share your data with:

• Service providers: Hosting providers, payment processors, email service providers — who process data on our behalf under written contracts
• Analytics providers: Google Analytics (anonymised data)
• Legal authorities: Where required by law, regulation, or court order

All third-party processors are required to respect the security of your personal data and to treat it in accordance with the law.

8. International Transfers

Some of our third-party service providers may be located outside the UK. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions recognised by the UK government.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiry data: 12 months from last communication
• Customer/order data: 6 years from the end of the business relationship (for tax and legal compliance)
• Marketing consent records: Until you withdraw consent
• Website analytics data: 26 months (anonymised)

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Request a machine-readable copy of your data
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@wemelt.io. We will respond within 30 days.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption on our website
• Secure storage with access controls
• Regular security reviews
• Staff training on data protection

12. Cookies

Our website uses cookies. For detailed information about which cookies we use and how to manage them, please see our Cookie Policy.

13. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

14. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

16. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact: