Privacy Policy

1. About this policy

This Privacy Policy explains how Devstack Consultancy Limited (“w52”, “we”, “us” or “our”) collects, uses, stores and protects your personal information when you use the w52 web app and website (the “Service”). Devstack Consultancy Limited trades as w52 and is the controller of the personal information described here.

It should be read together with our Terms & Conditions and our Cookie Policy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

w52 is a private space for planning your own life. We have designed it so that your content stays yours: every account is isolated to a single user, and we do not sell your personal information or your content to anyone.

2. Who this applies to

We may collect personal information about:

• registered users of the Service;
• people who contact us for support or with an enquiry; and
• visitors to our website.

The Service is intended for adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. See section 11.

3. What information we collect

Account information. When you register we collect your first name, last name and email address, and we store a securely hashed version of your password. We never store your password in plain text. We also record whether your email has been verified and your marketing preference.

The content you create. w52 exists so you can plan your life, so the Service holds the content you choose to add: the roles you play, your mission and objectives for each, your tasks and the Eisenhower quadrant you place them in, your weekly plans, and any lists, items and labels you create. This is your own private, reflective content. It is visible only to you and to the limited staff and providers described in section 8, and only where genuinely necessary to run and support the Service.

Correspondence. If you contact us, we keep a record of that correspondence.

Technical and usage information. When you use the Service we automatically collect certain technical information, such as your IP address, browser and device type, and information about how you use the Service. See our Cookie Policy for details of the cookies and similar technologies involved.

4. How we collect it

• directly from you, when you register, use the Service, add content or contact us;
• automatically, through cookies and similar technologies as you use the Service; and
• from our service providers, such as our hosting and email delivery providers, in the course of operating the Service.

5. How we use your information and our lawful bases

We only use your personal information where we have a lawful basis to do so under UK GDPR.

6. Marketing

We only send you marketing emails if you opted in when you registered or otherwise asked to receive them. You can withdraw your consent and unsubscribe at any time using the link in any marketing email or by contacting us. Even if you opt out of marketing, we will still send you essential service messages about your account.

7. Cookies and analytics

We use one strictly necessary cookie to keep you signed in, and optional Google Analytics cookies that load only if you accept them. Full details are in our Cookie Policy.

8. Who we share your information with

We share personal information only where necessary, with:

• our hosting and infrastructure providers, who host the Service and its database on our behalf;
• our email delivery provider, used to send verification, password reset and other service emails;
• Google Analytics, but only where you have accepted analytics cookies;
• professional advisers such as lawyers, accountants and insurers, where reasonably required;
• regulators, law enforcement or courts, where we are required to do so by law; and
• a buyer or successor, if the Service or our business is sold or reorganised.

We require anyone who processes personal information on our behalf to keep it secure and to use it only for the purposes we specify. We do not sell your personal information.

9. International transfers

We are based in the United Kingdom and store your information in the UK or the European Economic Area where we can. Some of our providers (for example Google Analytics) may process information outside the UK. Where that happens, we make sure appropriate safeguards are in place — such as an adequacy decision or the UK International Data Transfer Agreement — so that your information continues to be protected to UK standards.

10. Keeping your information secure

We take security seriously and use appropriate technical and organisational measures to protect your information against loss, unauthorised access, misuse, alteration or disclosure. Passwords are stored only as secure hashes, traffic between your device and the Service is encrypted in transit, and access to personal information is limited to those who genuinely need it to run and support the Service.

11. Children

The Service is intended for adults aged 18 or over. It is not directed at children and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. How long we keep your information

We keep your personal information only for as long as it is reasonably necessary for the purposes set out in this policy, or to meet our legal obligations. Your account information and the content you create are kept while your account is active. If you close your account, we delete or anonymise your account information and content within a reasonable period, except where we are required to keep certain records for longer to comply with the law. Residual copies may persist in secure backups for a limited time before being overwritten.

13. Your rights

Under UK data protection law you have the right to:

• ask for access to the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete your information;
• ask us to restrict how we use your information;
• object to certain uses of your information;
• ask for a copy of your information in a portable format; and
• withdraw your consent at any time where we rely on it.

To exercise any of these rights, please contact us using the details below. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to resolve your concerns first.

14. Third-party websites

The Service may contain links to third-party websites. Those websites have their own privacy policies and we are not responsible for how they collect or use your information.

15. Changes to this policy

We may update this policy from time to time to reflect changes to the Service, the law or the way we use personal information. The version and date at the top of this page show when it was last updated. Please check back so you are aware of the current version.

16. Contact us

If you have any questions about this policy or how we use your personal information, please contact us:

• Email: support@w52.app
• Post: Devstack Consultancy Limited, West Hill House, Allerton Hill, Chapel Allerton, Leeds, LS7 3QB
• Company number: 08363434 (registered in England and Wales)