1. Who We Are
WPT provides finance, accounting and business support services to clients in the United Kingdom and other international markets.
For information collected directly through our website or business communications, WPT normally acts as a data controller. When processing information on behalf of a client, we generally act as a data processor, and the relevant client remains responsible for determining how that information is used.
2. Information We Collect
Depending on your interaction with us, we may collect:
- Your name, job title, company name and contact details.
- Information submitted through website forms, emails, telephone calls or consultation requests.
- Business, accounting, payroll, employment, supplier and customer information provided while delivering our services.
- Financial information, transaction details, invoices, bank records and tax-related information.
- Employee information required for payroll or HR support, including information about salary, tax, pensions, benefits, attendance and employment.
- Technical information such as your IP address, browser, device, operating system and website usage.
- Marketing preferences and records of your communications with us.
- Any other information you choose to provide.
Some services may require us to process sensitive or special-category information, such as health-related information contained in payroll, leave, benefits or HR records. We process such information only when necessary and where an appropriate legal basis or condition applies.
3. How We Use Your Information
We may use personal information to:
- Respond to enquiries and consultation requests.
- Prepare proposals and establish business relationships.
- Deliver accounting, payroll, HR, tax support, reporting, FP&A and automation services.
- Manage client accounts, contracts, invoicing and payments.
- Communicate with clients, suppliers and business contacts.
- Maintain the security and performance of our website and systems.
- Improve our website, services and customer experience.
- Meet legal, regulatory, tax, audit and compliance obligations.
- Prevent fraud, misuse, unauthorised access and other security threats.
- Send relevant business updates or marketing communications where permitted.
We will not sell or rent your personal information.
4. Our Legal Bases for Processing
Where UK data protection law applies, we process personal information under one or more of the following legal bases:
- Contract: Processing is necessary to enter into or perform a contract.
- Legal obligation: Processing is required to comply with applicable laws and regulations.
- Legitimate interests: Processing is necessary for operating and improving our business, managing client relationships and protecting our systems, provided these interests do not override your rights.
- Consent: You have given consent for a specific purpose, such as certain marketing activities or non-essential cookies.
- Legal claims or substantial public interest: Where applicable to special-category information.
- Employment and social protection obligations: Where necessary for payroll, HR or employee benefit services.
You may withdraw your consent at any time, although this will not affect processing already carried out lawfully.
5. Information Processed for Clients
When WPT processes personal information as part of a service delivered for a client, we do so only in accordance with the client’s documented instructions, our contractual obligations and applicable data protection requirements.
Questions about information controlled by one of our clients should normally be directed to that client. We will reasonably assist our clients in responding to data protection requests and meeting their legal obligations.
6. Sharing Your Information
We may share personal information with:
- Authorised WPT employees and contractors who require access to perform their duties.
- Companies within our business group, where applicable.
- Cloud hosting, software, IT support, communications and cybersecurity providers.
- Professional advisers, auditors, insurers, banks and payment providers.
- Government authorities, courts, regulators or law-enforcement agencies where legally required.
- A buyer, investor or successor if our business is reorganised, merged or transferred.
- Other parties where you have authorised us to share the information.
Our service providers are required to protect personal information and use it only for authorised purposes.
7. International Data Transfers
WPT operates from India and may process information received from clients or individuals located in the United Kingdom or other countries.
Where personal information is transferred internationally, we use appropriate contractual, organisational and technical measures as required by applicable law. These may include the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, transfer risk assessments and additional security controls.
Current ICO guidance requires restricted transfers to be covered by adequacy regulations, appropriate safeguards or a valid legal exception. Read the ICO’s international transfer guidance.
8. Data Security
We use appropriate measures designed to protect personal information from accidental loss, misuse, alteration, unauthorised access or disclosure. These measures may include:
- Role-based access controls.
- Password and authentication controls.
- Encryption and secure transfer methods, where appropriate.
- Confidentiality obligations and employee training.
- Backup, monitoring and incident-management procedures.
- Supplier and system security assessments.
No internet-based service can guarantee absolute security. However, we regularly review our safeguards and update them where appropriate.
9. Data Retention
We retain personal information only for as long as necessary for the purpose for which it was collected, including contractual, legal, tax, accounting, audit and regulatory requirements.
Retention periods depend on the nature of the information and our legal or contractual obligations. When information is no longer required, we securely delete, anonymise or return it in accordance with our procedures and client instructions.
10. Cookies
Our website may use cookies and similar technologies to:
- Enable essential website functions.
- Remember user preferences.
- Maintain website security.
- Measure website traffic and performance.
- Support embedded content or marketing features.
Non-essential cookies, including analytics or advertising cookies, should be activated only after you provide consent. You can accept, reject or manage cookies through our cookie banner or your browser settings.
ICO guidance requires websites to explain their cookies and obtain active consent before setting cookies that are not strictly necessary. Read the ICO’s cookie guidance.
11. Marketing Communications
We may send relevant information about our services where you have provided consent or where otherwise permitted by law. You may opt out at any time by:
- Clicking the unsubscribe link in a marketing email.
- Contacting us at info@winprotech.co.uk.
- Updating your communication preferences, where available.
We may retain limited information to record your opt-out preference.
12. Your Data Protection Rights
Subject to applicable law, you may have the right to:
- Request access to your personal information.
- Ask us to correct inaccurate or incomplete information.
- Request deletion of your information.
- Request restriction of processing.
- Object to certain processing, including direct marketing.
- Request transfer of eligible information in a portable format.
- Withdraw consent at any time.
- Raise concerns about automated decision-making, where applicable.
- Lodge a complaint with the relevant data protection authority.
To exercise your rights, contact info@winprotech.co.uk. We may need to verify your identity before completing the request.
If you are in the United Kingdom, you may also complain to the Information Commissioner’s Office (ICO) through www.ico.org.uk.
13. Third-Party Links
Our website may contain links to external websites. WPT is not responsible for the privacy, security or content of third-party websites. We recommend reviewing their privacy policies before providing personal information.
14. Children’s Information
Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal information directly from children through the website.
Information relating to employees’ children or dependants may be processed only where necessary for authorised payroll, HR, insurance or benefit administration services.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, technology or legal obligations. The latest version will be published on this page with a revised “Last updated” date.
16. Contact Us
For questions, concerns or requests relating to this Privacy Policy or your personal information, contact:
