Privacy Policy

Digital Womble Ltd is the data controller for the personal data described in Section C. We are registered with the Information Commissioner's Office under registration CSN7208955. You can contact us about privacy at john@digitalwomble.co.uk or by writing to the registered office below.

We act in two distinct roles depending on the data:

Controller, for the account, billing, usage and lifecycle data we hold about you and your staff. We decide why and how this data is processed.

Processor, for the website, URL and content data you submit to a product. We process this only on your instruction and only to generate your Output. You are the controller of that submitted data.

Account data: name, business name, email address, account credentials.

Billing data: billing contact, transaction records and payment references (card and bank details are handled by our payment processor, not stored by us).

Usage data: how you interact with the product, for support and improvement.

Lifecycle and marketing data: your marketing-consent state and the lifecycle markers we hold in our CRM.

Acceptance records: the evidence of which version of our terms you accepted and when, as described in our Terms (master and marketing state, timestamp, IP address, acceptance flag and legal-copy version reference).

When you use a product, you submit data for us to process on your behalf:

For TACS: the website, topics, briefs and related content inputs from which content Output is generated.

For TQO: the website and URLs you submit for technical analysis.

You must not submit special category personal data or other sensitive personal data through the products. We process submitted data only to produce your Output and for no other purpose.

As controller we rely on: contract, to provide the product you bought and manage your account; legitimate interests, to secure, support and improve our services and to run our business, balanced against your rights; consent, for marketing emails and for any non-essential cookies; and legal obligation, for tax, accounting and regulatory record-keeping.

TACS uses Anthropic's commercial API to generate content Output. Under Anthropic's commercial API terms effective 14 September 2025, inputs and outputs are retained for a maximum of seven days and then automatically deleted, are not used to train Anthropic's models, are not sold to third parties, and are not used for cross-customer benchmarking. The seven-day retention exists solely so the provider can operate the service and detect misuse.

TQO does not use a generative language model to produce its core audit Output.

We use Cloudflare Turnstile in invisible mode to protect sign-up and checkout from automated abuse. Turnstile may process limited technical signals to distinguish humans from bots. This is governed by Cloudflare's Turnstile privacy terms at cloudflare.com/en-gb/turnstile-privacy-policy/.

We engage the following sub-processors. Each is bound by terms that protect your data. An up-to-date list is maintained on this site at the Sub-processors page, linked in the footer.

We send marketing emails only where you have opted in through the separate, unticked marketing checkbox at checkout, the wording of which is: I would like to receive marketing emails and product updates from Digital Womble. You can withdraw consent at any time using the unsubscribe link in any marketing email or by emailing support@digitalwomble.co.uk. We action withdrawal within five working days. Withdrawing marketing consent does not affect the transactional emails we must send to run your account.

Where data is transferred outside the UK, we rely on appropriate safeguards, including the UK International Data Transfer Agreement or Addendum and standard contractual clauses, as applicable to each sub-processor.

Submitted content and URL data: processed transiently to produce Output; at the LLM provider it is held for a maximum of seven days then deleted.

Account and lifecycle data: kept while your account is active and for a reasonable period afterwards.

Billing and accounting records: kept for six years to meet tax and accounting obligations.

Acceptance records: kept for the life of the relationship and a reasonable period afterwards to evidence agreement.

You have the right to access, correct, erase, restrict and port your personal data, and to object to processing based on legitimate interests or to direct marketing. To exercise any right, email john@digitalwomble.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, though we would welcome the chance to resolve any concern first.

We may update this policy. The current version is always published at digitalwomble.co.uk/privacy, and material changes are notified where appropriate.