LAUNCHING SOONWidian is launching soon. Book a Demo

Widian
Book a Demo

Privacy notice · draft for approval

How Widian uses personal data.

This notice explains the personal data collected through widian.tech, why it is used, where it is stored and the choices available to you.

Version: draft 0.1 · 24 August 2026

1. Who controls your data

Widian is the data controller for personal data collected through this marketing website and its demo-enquiry process. Widian decides why and how that data is used.

Required before publication

Insert Widian’s registered legal name, registered address, company number and monitored privacy email address. Confirm whether a formal data protection officer is required or appointed.

2. What we collect and why

Widian limits collection to information needed for a defined purpose. Please do not submit resident information, special-category data, defect evidence or incident details through the demo form.

Demo enquiries

Data
Name, work email, organisation, role, portfolio band, selected challenge, optional message, booking details and enquiry source.
Purpose
To respond, arrange and deliver the demo, keep an auditable enquiry record and manage any resulting business relationship.
Lawful basis
Widian proposes legitimate interests for business-to-business enquiries and steps requested before entering a contract. This basis must be approved before lead capture goes live.

Optional marketing

Data
Business contact details and a record of the wording, time and source of the preference.
Purpose
To send specifically requested updates and maintain suppression records when someone opts out.
Lawful basis
Consent where requested. Marketing permission is separate, optional and can be withdrawn at any time.

Site security and operation

Data
IP address, device and browser information, request metadata, timestamps and diagnostic events.
Purpose
To deliver the site, prevent abuse, investigate faults and protect Widian's systems.
Lawful basis
Widian's legitimate interests in operating and securing the website, subject to a documented balancing assessment.

Audience analytics

Data
Pseudonymous interaction and device information. Form values and direct identifiers must not be included.
Purpose
To understand site performance and improve relevant visitor journeys.
Lawful basis
Consent where required. Non-essential analytics must remain disabled until a visitor has made a valid choice.

Widian does not currently plan to use website enquiry data for solely automated decisions or profiling that produces legal or similarly significant effects.

3. Storage, processors and international access

Demo-enquiry records will be stored in a separate Supabase marketing database. The website will be hosted by Vercel using an EU AWS execution and storage region selected by Widian. Marketing data will not be placed in Widian’s operational Building Record database by default.

Widian may use vetted providers to host the site and database, send transactional messages, schedule demos, monitor security and—only after the appropriate choice—measure site use. These providers act under contractual data-protection obligations and may use approved sub-processors.

An EU hosting region does not by itself rule out international access or onward processing. Before launch, Widian will document each processor, data location and restricted transfer, using an applicable UK adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another permitted safeguard where required.

4. How long we keep personal data

Widian will keep personal data only for as long as needed for the purpose collected, an active business relationship, legal or accounting obligations, disputes, or the minimum suppression record needed to honour a marketing objection.

Required before publication

Approve and insert review or deletion periods for unqualified enquiries, active opportunities, customer communications, consent evidence, suppression records, security logs and analytics data.

5. Your data-protection rights

Depending on the processing and lawful basis, you may have the right to:

  • ask for access to personal data Widian holds about you;
  • ask for inaccurate or incomplete data to be corrected;
  • ask for data to be erased in applicable circumstances;
  • ask Widian to restrict processing in applicable circumstances;
  • object to processing based on legitimate interests;
  • receive portable data where the right applies;
  • withdraw consent at any time where processing relies on consent;

You have the right to object at any time to personal data being used for direct marketing.

These rights are not absolute in every situation. Widian may need to verify your identity proportionately before acting on a request.

6. Cookies and similar technologies

Strictly necessary technologies may be used to operate and protect the site. Non-essential analytics and third-party calendar technologies must not load until the required consent choice has been made. See the Cookie Notice for the current inventory and controls.

7. Contact and complaints

Contact Widian’s privacy owner to exercise a right, withdraw consent or raise a concern. The monitored privacy address must be inserted before publication.

You can also complain to the Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint for current contact options. We would welcome the opportunity to address your concern first.

8. Changes to this notice

Widian will review this notice when its purposes, suppliers or processing change. Material changes will be dated here, and the notice version shown with a demo enquiry will be stored with that enquiry.