Who we are
Woodlark Associates Ltd is a company registered in England and Wales (Company No. 17031332), with its registered office at 124–128 City Road, London, EC1V 2NX. We are the data controller for the personal data described on this page. We are registered with the Information Commissioner's Office under registration ZC137468, and VAT registered (GB514057909).
What this website collects
This is a static website. By default it sets no cookies and does not use advertising identifiers, browser storage, fingerprinting or session replay. It always runs a small first-party measurement script and Vercel Web Analytics, both cookie-free, so we can understand whether the site is useful and which routes lead to genuine enquiries. If you agree when asked, it also runs Google Analytics 4, which does use cookies; see below for what that means.
The always-on measurement records the page path (never its query string), broad source or referring-site category, approved campaign labels, selected calls to action, form outcomes, one coarse engagement signal and which homepage layout you were shown. It does not record your name, email address, company, message, IP address, full referring URL, keystrokes or a visitor or session identifier. Vercel Web Analytics counts page views and the referring site without cookies or browser storage; to tell visits apart within a day it uses a hash of the connection details that is discarded daily and never shown to us. As with any web request, Vercel processes the connection information needed to deliver and protect the service; an IP address may be checked against a short-lived abuse limit, but Woodlark does not write it to analytics. Global Privacy Control and browser Do Not Track signals turn off all measurement, including Google Analytics.
Google Analytics 4 is optional and off until you say yes. A prompt appears on your first visit; accepting lets Google set its own cookies and receive site-usage data, handled under Google's privacy policy. Declining changes nothing else about the site, and your choice is remembered as a small entry in your browser's local storage rather than a cookie. You can change your mind at any time by reopening the cookie prompt.
When you accept that prompt, we may also use Snitcher to recognise the company behind a visit. Snitcher looks up the IP address of the network you are browsing from and, where that address belongs to a business, tells us the business's name and the pages it looked at. It identifies the company, not the person, and we do not use it to find out who you are. We rely on legitimate interests for this, to understand which businesses find the site useful and to decide who to contact; the tracker itself only runs after you accept, and Snitcher handles the data under its own privacy policy. You can object at any time: decline or change your answer in the cookie prompt, or email hello@woodlarkassociates.co.uk and we will stop and delete what we hold about your company's visits.
When you send the contact form, we collect the name, email address, company and message you type in, and your answer to “How did you hear about us?” if you give one. Your enquiry email also notes how you arrived at the site (for example from a search engine or an AI assistant, and which website referred you) and the first page you visited, so we can see which routes bring us enquiries. Those details are handled by a small piece of code running on Vercel (the service that hosts this site) and delivered straight to us by email through Resend, the email provider that handles the sending. Nothing you type is kept in a database on this site — the message simply lands in our inbox. If you have JavaScript turned off, the form falls back to opening your own email client with the details filled in instead.
The homepage has a website reader: you can type in a company's web address and we show where AI might plausibly earn its keep there. When you do, we fetch that public website, send an extract of its text to OpenAI's Luna model to write the readout, and keep a record of the web address you typed, when, and what we showed you. That record is a business web address, not a personal detail, and we use it only to understand who is finding the tool useful and to follow up where it makes sense. Woodlark does not keep the extracted text afterwards; we keep the record of the address and what we showed you for twelve months. We do not store your IP address with it, and if the reader offers a box to describe your week, nothing you type there is kept unless you choose to send it to us through the contact form. If it's your business and you'd rather we didn't hold the address, email hello@woodlarkassociates.co.uk and we'll delete it within seven days.
If you ask the website reader to email you the full readout, we collect the email address you type. We use it to send the readout you asked for and one follow-up about it, and nothing else. Those emails are sent through Resend, the same email provider the contact form uses. The address is not stored with the reader's record of web addresses. It is kept in our mailbox, because we receive a note that you asked, and in our sales system, so we know who we have written to. Every email we send has a way to unsubscribe: reply with "unsubscribe", or email hello@woodlarkassociates.co.uk, and we will send nothing more and delete your address from both.
The AI profile (“What kind of AI business are you?”) runs at profile.woodlarkassociates.co.uk. It sets no cookies and does not record your IP address. When you finish it, we keep your answers and the profile they produced, without your name or email address, so we can see how the profile is used and improve it.
If you ask for your result by email, we also collect the details you choose to give: your email address and, if you fill them in, your first name, company, role and company size. We use them to send your result and to understand who is finding the profile useful, so a founder can follow up where it makes sense. If you tick the box asking for occasional emails from Woodlark, we keep a record of that consent and when you gave it, and you can withdraw it at any time. If you joined through a link from your leadership team, your answers are also shown, with the label you chose, in a combined view that anyone holding that team’s link can see.
These details are stored in a database run by Supabase, hosted in Ireland (EU), and the result email is sent through Resend, the same email provider the contact form uses. We keep them for two years and then delete them. To have them removed sooner, or to stop any emails, email hello@woodlarkassociates.co.uk.
To stop the form being flooded, Vercel also checks your IP address against a short-lived rate limit when you submit — that's a count against the address, used only to slow repeated sends, held only for the moments the check needs, and never joined to what you wrote or used for anything else.
If you'd like anything you've sent us removed, email hello@woodlarkassociates.co.uk and we will handle it.
If we contacted you first
We write to some businesses before they have written to us. If that is how you heard from us, this is where your details came from and what we do with them.
- Where we found you. Companies House, your company's website, and Apollo, a business data provider.
- What we hold. Your name, your role, your work email address, your company's name and web address.
- Why. To write to you about work we think could help your business. We rely on legitimate interests for this, and we write only to work addresses.
- Private notes. Some emails link to a short note we wrote for your company from its public website. That page sets no cookies. If it includes a first version of a tool to try, the tool works only in your browser and sends nothing you type or choose anywhere. The page is written for one company, so it records that your company's page was opened, when and how often, and tells us. It does not record which individual opened it.
- How long. If you don't reply, we delete your details twelve months after we last wrote to you.
- How to stop it. Reply "no thanks" (or "unsubscribe") to any of our emails, or write to hello@woodlarkassociates.co.uk. We will not write again, and we keep only your email address on a do-not-contact list so that it stays that way.
What we hold about you
Apart from the people we write to first (above), the only personal data we hold is what you choose to send us:
- AI profile. If you leave your details at the end of the AI profile, we hold them with your answers for two years, as described above.
- Readout emails. If you ask for the full readout by email, we hold your email address and the web address you looked up, in our mailbox and sales system, until you unsubscribe or ask us to delete them.
- Email correspondence. If you email us, we hold your name, email address, and whatever you include in your message, for as long as the correspondence is live and for a reasonable period afterwards.
- Bookings. If you book a call through Calendly, your booking details are processed by Calendly under its own privacy policy, and shared with us so we can hold the meeting.
- Client engagements. If we work together, we hold the information needed to deliver the engagement and meet our legal obligations (for example invoicing records), for the periods UK law requires.
How we use it
To reply to you, to prepare for and hold meetings you book, to deliver work you engage us for, and to meet legal obligations. We do not sell personal data or share it with anyone else for their marketing.
Your rights
Under UK data protection law you can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email hello@woodlarkassociates.co.uk and a founder will handle it personally.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Complaints about your data
If you think we have got something wrong with your personal data, tell us here. A founder reads every complaint, and we acknowledge within 30 days. You can still go to the ICO at any point.
Changes to this policy
If this policy changes, the new version will appear on this page with an updated date at the top.