Privacy Policy
Last updated: 22 May 2026
Website operated by: Woodbridge & Co
Website built and hosted by: Penovex Limited trading as Masser
This privacy policy explains how personal data is collected and used when you visit this website.
1. Who Is Responsible for Your Data
This website is operated by Woodbridge & Co ("the business"), who is the data controller for any personal data you submit directly s (e.g. through contact forms or enquiries).
The website is built and hosted by Penovex Limited trading as Masser ("the hosting provider"), who acts as a data processor on behalf of the business. Masser processes visitor data only as necessary to operate, maintain, and improve the website.
2. What Data We Collect
2.1 Data You Provide
- Contact form submissions — name, email address, phone number, message content, and any other fields included in the form
- Any other information you voluntarily provide through the website
2.2 Data Collected Automatically
When you visit this website, certain data is collected automatically:
- Technical data — IP address, browser type and version, operating system, device type, screen resolution
- Usage data — pages visited, time spent on pages, referring website, click paths
- Location data — approximate geographic location derived from IP address (country/region level only)
This data is collected through:
- Server logs — standard web server access logs maintained by the hosting provider (Vercel)
3. How Your Data Is Used
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry or form submission | Legitimate interest of the business |
| Operating and maintaining the website | Legitimate interest |
| Analysing website usage to improve content and performance | Legitimate interest |
| Complying with legal obligations | Legal obligation |
4. Who Your Data Is Shared With
| Recipient | Role | Purpose |
|---|---|---|
| Woodbridge & Co | Data controller | Receives your form submissions and enquiries |
| Penovex Limited (Masser) | Data processor | Hosts the website, processes form submissions, maintains the site |
| Anthropic PBC | Sub-processor | Content production infrastructure (business information provided during site creation only — not visitor data) |
| Vercel | Sub-processor | Website hosting and content delivery |
| Resend | Sub-processor | Email delivery for form submissions |
Your data is not sold to any third party.
5. Analytics and Tracking
This website does not currently use any third-party analytics or tracking tools.
6. Data Retention
| Data type | Retention period |
|---|---|
| Form submissions | Retained by the business; contact the business directly for deletion |
| Server logs | 30 days (Vercel standard retention) |
7. Aggregated and Anonymised Data
The hosting provider (Penovex Limited / Masser) collects anonymised, aggregated performance data from visitor activity across all websites it hosts. This includes metrics such as page views, session durations, conversion rates, device types, geographic regions (country/region level), and traffic sources.
This aggregated data:
- Cannot identify you as an individual
- Is used to improve Masser's products, design quality, and service delivery
- May be used to produce industry benchmark reports and performance insights
- May be shared with or licensed to third parties (including market research firms, trade bodies, and commercial partners), provided no individual visitor or business is identifiable
- Is retained indefinitely
For clarity: No personally identifiable information about you is ever included in this aggregated data.
8. Your Rights
Under the UK General Data Protection Regulation (UK GDPR), you have the right to:
- Access — request a copy of your personal data
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data
- Restrict processing — request limits on how your data is used
- Object — object to data processing based on legitimate interest
- Data portability — receive your data in a machine-readable format
For data you submitted directly (e.g. form enquiries), contact the business at georgelishman@gmail.com.
For data processed by the hosting provider, contact Masser at team@masser.uk.
We will respond to requests within 30 days.
9. Data Security
This website uses HTTPS/TLS encryption for all data transmission. Form submissions are transmitted securely and delivered to the business via encrypted email. The hosting provider implements appropriate technical and organisational security measures.
10. International Transfers
Some service providers process data in the United States (Anthropic PBC, Vercel, Resend). Where data is transferred outside the UK, appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms.
11. Children's Data
This website is not directed at individuals under 16. We do not knowingly collect personal data from children.
12. Changes to This Policy
This privacy policy may be updated from time to time. The latest version is always available on this page.
13. Complaints
If you are unhappy with how your data is handled, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
14. Contact
- Business enquiries: georgelishman@gmail.com
- Hosting provider: Penovex Limited (Masser) — team@masser.uk