Woodlark Associates Ltd — Studio Woodlark & Studio Woodlark Hospitality

Last updated: 1 May 2026 ICO Registration: C1922896

Who we are

Studio Woodlark and Studio Woodlark Hospitality are trading names of Woodlark Associates Ltd, a company registered in England and Wales (Company No. 17031332).

For the purposes of UK data protection law, Woodlark Associates Ltd is the data controller for personal data processed in connection with both services.

Contact: hello@studio.woodlarkassociates.co.uk hello@hospitality.woodlarkassociates.co.uk

What data we collect and where from

We collect and process the following categories of personal data:

Business contact information Director name(s) Business email address Business telephone number (where publicly listed) Registered business address

Business information Company name and registration number Nature of business and trading sector Google Business profile information including reviews and ratings Publicly listed social media profiles (Facebook, Instagram) Existing website content where applicable

Communication data Email correspondence with us Reply content and preferences expressed

We source this data from: Companies House public register (under the Companies House data reuse licence) Google Business profiles (publicly available) Facebook and Instagram business pages (publicly available) Hunter.io email verification service The business's own existing website where one exists

We do not purchase data from third-party marketing lists.

Why we process your data and our lawful basis

Purpose 1 — Building and delivering a website preview We use publicly available information about your business to build a website preview and send it to you unsolicited, demonstrating what a professional website for your business could look like.

Lawful basis: Legitimate interest (Article 6(1)(f) UK GDPR). Our legitimate interest is in offering a commercial service to businesses that may benefit from it. We have assessed that this interest is not overridden by the rights and interests of the individuals concerned.

Purpose 2 — Direct marketing by electronic means We send one initial cold email and up to two follow-up emails to business email addresses sourced from public records.

Lawful basis: Legitimate interest (Article 6(1)(f) UK GDPR) and PECR Regulation 22. We target only UK Limited companies, using business email addresses published in public registers. Every email includes a clear and simple opt-out mechanism.

Purpose 3 — Delivering purchased services Where a business purchases a website from us, we process personal data to deliver the service, including registering a domain in the customer's name and providing handover documentation.

Lawful basis: Contract performance (Article 6(1)(b) UK GDPR).

Purpose 4 — Compliance and legal obligations We maintain records of communications, consent, and deletion requests to demonstrate compliance with UK GDPR and PECR.

Lawful basis: Legal obligation (Article 6(1)(c) UK GDPR).

Article 14 transparency — how we obtained your data

We found your contact details via your published Companies House listing and other publicly available business records. If you would like us to delete your data, please reply to our email with the word "delete" or contact us at the addresses above.

What we do with website previews

For businesses that do not purchase our service:

Preview websites are hosted for a maximum of 14 days from the date of our last email contact. After 14 days, all preview content is permanently deleted by our automated process. On receipt of a deletion request, preview content is deleted within 24 hours. A screenshot of the preview may be retained for our records for up to 30 days.

For businesses that purchase our service:

All website content and associated data transfers to the customer on payment. We retain a copy of the handover documentation for 24 months for customer support purposes.

How long we keep your data

Prospect contact data (unsold): 14 days from last email contact Email correspondence: 24 months Customer data (post-purchase): 24 months from purchase date Suppression list (opt-outs): Indefinitely, to prevent re-contact Financial records: 7 years (legal requirement) Send, open, reply and deletion audit log: 12 months minimum

After the relevant retention period, data is permanently deleted from all systems.

Who we share your data with

We do not sell your data. We share data only with the following third-party processors where necessary to deliver our service:

Google Workspace — email sending and receiving Cloudflare — website hosting and DNS Stripe — payment processing Hunter.io — email address verification Anthropic — AI-powered website generation TableAgent — booking system integration (Studio Woodlark Hospitality only)

All third-party processors are required to process data only on our instructions and in accordance with applicable data protection law.

Your rights

Under UK GDPR you have the following rights:

Right to access — request a copy of the personal data we hold about you Right to erasure — request deletion of your personal data Right to rectification — request correction of inaccurate data Right to restrict processing — request we limit how we use your data Right to object — object to processing based on legitimate interest, including direct marketing Right to data portability — request your data in a portable format

To exercise any of these rights, contact us at: hello@studio.woodlarkassociates.co.uk hello@hospitality.woodlarkassociates.co.uk

We will respond within one calendar month.

Right to complain: If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113. Our ICO registration number is C1922896.

Cookies

Websites built and hosted by Studio Woodlark use cookies as follows:

Studio Woodlark sites: Essential cookies only. No tracking or analytics cookies are set without user consent.

Studio Woodlark Hospitality sites: Functional cookies are used to load the TableAgent booking widget. Users are presented with a cookie consent banner before the widget loads. Declining cookies disables the booking widget but does not affect the rest of the site.

For our own pages at woodlarkassociates.co.uk, we use essential cookies only.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent update.

Contact us

Woodlark Associates Ltd ICO Registration: C1922896 Company No. 17031332

hello@studio.woodlarkassociates.co.uk hello@hospitality.woodlarkassociates.co.uk