JW Business Digital Privacy Notice

Who is responsible JW Business Digital, operated by Jonathan Whittaker, is responsible for personal information used for its own website, enquiries, trial applications and business administration. Where JW Business Digital processes booking-customer information on a business customer's instructions, that business will usually be the controller and JW Business Digital will act as processor. Application information and purposes A JW Bookings Essential trial application may contain business and contact details, applicant identity and role, services, proposed availability, booking preferences, legal acceptance evidence, security and audit information, and information required to review, prevent duplicates, provision and administer the requested service. JW uses this information to receive and assess the application, contact the applicant about it, prevent duplicate or abusive submissions, configure an approved service, maintain security and audit evidence, and meet applicable legal obligations. Application submission does not create a customer account or start a trial. Providers Cloudflare hosts and protects the website and platform, including Workers, D1, Turnstile and configured email delivery. Microsoft 365 provides JW Business Digital's business mailbox. Encrypted recovery copies are stored independently in Amazon S3 in London. Provider support or sub-processors may involve processing outside the UK under applicable safeguards. Marketing Operational application and service communications are separate from marketing. A trial applicant is not subscribed to marketing automatically. Any marketing choice must be optional and separately recorded. Retention and security Application information is retained only under an authorised application-retention policy. Final periods for incomplete, rejected and withdrawn applications remain an Owner and legal-governance decision. Immutable legal acceptance and security or audit evidence may require different treatment from ordinary application profile information. No automated deletion period is implied until the controlled policy is adopted. Security controls include restricted access, Owner multifactor authentication, scoped sessions, encryption for selected secrets and tokens, audit evidence, security headers, abuse controls, encrypted backups and recovery monitoring. Rights and contact Depending on the circumstances, a person may request access, correction, deletion, restriction or portability, or object to particular processing. Requests may be made to jonathan@jwbusinessdigital.co.uk. JW verifies the requester and distinguishes information that may be amended or deleted from evidence that must lawfully remain immutable or be retained. Complaints may also be made to the Information Commissioner's Office. WhatsApp booking updates If a person chooses transactional booking updates through WhatsApp, JW Bookings processes the person's telephone number, WhatsApp preference and the booking information needed to create and deliver the selected message. A message may contain the booked business, appointment date and time, service information and a secure booking-management link where enabled. JW Business Digital uses the WhatsApp Business Platform supplied through Meta Platforms, Inc. and its authorised sub-processors for this delivery. Provider processing creates message identifiers and delivery information such as submitted, sent, delivered, read, failed or reconciliation status. JW records the person's versioned WhatsApp preference and any later withdrawal or change. This operational choice is separate from marketing and does not affect the booking or email choices. Payment and billing providers Where you pay by card or use a recurring card payment, payment information is processed by Stripe. JW Business Digital does not store your full card number or security code. We may receive payment and billing identifiers, payment status, limited payment-method details, fraud/risk information, refund or dispute information and related transaction records so that we can administer invoices, recurring services, refunds, disputes, reconciliation and customer support.