Legal
Privacy policy
Effective date: 27 September 2026
This policy explains how WD Assist Ltd (“WD Assist”, “we”, “us”) uses personal data when you visit wdassist.com, send us a message, book a discovery call or use the AMS health check. It is written for the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations, and it also covers visitors from the European Economic Area.
1. Who we are
WD Assist Ltd is the controller of the personal data described here. We are registered in England and Wales under company number 13212113; our registered office is 2 Bridge Street, Leatherhead, Surrey, KT22 8BZ. WD Assist is part of Cloud Assist Group: our customer records are kept in a CRM system that Cloud Assist Group companies share, and colleagues in the group may see your enquiry where that helps us answer it. For anything about your data, write to enquiries@wdassist.com with “Privacy” in the subject, or to the address above.
2. What we collect
- When you send a message: your name, work email, company, and anything else you choose to give us (job title, phone, country, your message). If you arrived through one of our campaign links, the campaign codes in that link are attached to the message; they are kept for later pages in your visit only if you have allowed analytics or advertising measurement.
- When you book a discovery call: your name, email, optional phone number and note, the time you choose, and any campaign codes and link interest kept as described above. We assign one of our consultants to the call.
- When you use the AMS health check: nothing. Your answers and score stay in your browser. If you choose “Discuss my results”, a short summary is placed in the contact form’s message box for you to edit, keep or delete; it reaches us only if you send the form.
- When you browse: our hosting and security providers process your IP address, browser details and the pages you request so the site can be delivered and protected. Only if you allow them, Google Analytics collects information about how you use the site, and Google Ads and the LinkedIn Insight tag measure our advertising. You choose each separately (see the cookie policy).
Please leave employee personal data, and any special category data, out of messages and booking notes. We do not need it to start a conversation.
3. Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to your message and arranging or holding a call | Our legitimate interest in responding to people who contact us; where you ask for a proposal, steps you ask us to take before a contract |
| Following up about related WD Assist services, by email or phone | Our legitimate interest in business-to-business marketing. The contact form has a box to refuse this when you write to us; you can also opt out at any time, and every marketing email has an unsubscribe link. If you are a sole trader or partnership, we email you about our services only on these terms |
| Analytics (Google Analytics 4, through Google Tag Manager) | Your consent, given and withdrawn through the cookie banner and “Cookie settings” |
| Advertising measurement (Google Ads through Google Tag Manager, and the LinkedIn Insight tag), and keeping campaign codes for later pages in your visit | Your consent, given separately from analytics, and withdrawn the same way |
| Keeping the contact form free of automated abuse (Google reCAPTCHA) and keeping the site secure | Our legitimate interest in the security of the website and our systems |
| Meeting legal obligations and handling claims | Legal obligation, or our legitimate interest in establishing and defending legal claims |
We do not make decisions about you by automated means, and we do not sell personal data.
4. Who receives your data
- Salesforce (Salesforce, Inc., with Salesforce UK Limited): our CRM, which stores messages sent through the contact form.
- Microsoft (Microsoft Corporation and Microsoft Ireland Operations Limited): Microsoft Bookings and Microsoft 365 for calendar invitations and email, and Microsoft Azure, which runs the booking service that connects this site to Microsoft Bookings.
- Google (Google LLC and Google Ireland Limited): reCAPTCHA on the contact form; with your consent, Google Tag Manager, Google Analytics 4 and Google Ads.
- LinkedIn (LinkedIn Ireland Unlimited Company and LinkedIn Corporation): with your consent, the LinkedIn Insight tag.
- Replit (Replit, Inc., on Google Cloud infrastructure): hosting for this website.
- Cloudflare (Cloudflare, Inc.): delivery and security for the website’s domain.
- Cloud Assist Group companies, where they help answer your enquiry or deliver a service you ask about.
- Professional advisers, and authorities where the law requires it.
5. International transfers
Some of these providers process personal data outside the United Kingdom, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework for certified providers) or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. For visitors in the European Economic Area we rely on the EU-US Data Privacy Framework or the Standard Contractual Clauses. Replit’s data processing terms include the EU Standard Contractual Clauses with the UK Addendum and the UK International Data Transfer Agreement. You can ask us for details of the safeguard for a particular provider.
6. How long we keep it
- Enquiries and discovery-call bookings: 24 months after our last contact with you, unless we go on to work together, when the engagement’s own records apply.
- Marketing preferences: if you opt out, we keep only what we need to stop contacting you.
- Analytics data: 14 months, as set in our Google Analytics property.
- Server and security logs: kept by Replit and Cloudflare under their data processing terms for operating and protecting the service; we do not keep separate copies.
7. Your rights
You can ask for access to your personal data, and for it to be corrected, erased or restricted, and you can ask for a copy to take elsewhere. You can object to our use of it based on legitimate interests, including for direct marketing, which we will always stop. Where we rely on consent you can withdraw it at any time through “Cookie settings”. Write to enquiries@wdassist.com and we will respond within one month.
You can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). If you are in the European Economic Area you can also complain to the supervisory authority where you live or work. We would appreciate the chance to put things right first.
8. Security
The site is served only over HTTPS with a strict content security policy, and access to our CRM and booking systems is limited to the people who need it. No method of transmission or storage is completely secure; if a breach affects your personal data in a way that puts you at high risk, we will tell you.
9. Children
This website is for businesses and is not directed at children.
10. Changes to this policy
We review this policy at least once a year and whenever our processing changes. We will change the effective date at the top when we do, and where a change needs your consent we will ask for it.
11. Contact
WD Assist Ltd, 2 Bridge Street, Leatherhead, Surrey, KT22 8BZ. Email enquiries@wdassist.com; telephone +44 1372 502341.