This privacy policy explains how wildflower creative limited, trading as wfc. (“wfc.”, “we”, “us”, or “our”), collects, uses, shares, and protects personal data when you visit wildflowercreative.co.uk (the “site”), contact us, subscribe to our newsletter, or engage us for services.
wfc. is the data controller for the personal data described in this policy. If you have a question about how your data is handled, you can reach us at:
wildflower creative limited
Email: hello@wildflowercreative.co.uk
Website: wildflowercreative.co.uk
Registered in: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ UNITED KINGDOM
2. Our approach to your data
Precision applies to data as much as it does to positioning. We collect only what a task requires, we say plainly what we do with it, and we do not sell personal data. This policy sets out, in practical terms, what we collect, why, how long we keep it, who we share it with, and the choices and rights available to you.
3. Information we collect
3.1 Information you give us directly
Contact details you submit through an email link, contact form, or booking tool — name, email address, company name, and the content of your message.
Newsletter sign-up details — name and email address, and your engagement with what we send (opens, clicks) via our email platform.
Information you share during a client engagement — business details, project materials, and communications, handled under the terms of the relevant engagement agreement rather than this policy.
3.2 Information collected automatically
Usage data — pages viewed, time on page, referring site, device and browser type, and approximate location (derived from IP address), collected via analytics tools.
Cookies and similar technologies — see Section 4 below.
3.3 Information from third parties
If you interact with us via a third-party platform (for example, LinkedIn or Instagram), that platform may share limited profile or interaction data with us in accordance with its own privacy policy.
4. Cookies and similar technologies
The site uses cookies and comparable technologies to operate reliably, understand how it is used, and improve it over time. Categories in use:
Where required by law (including under UK/EU rules), we present a cookie consent banner allowing you to accept or decline non-essential cookies before they are set, and to change your preference at any time via your browser settings; blocking some cookies may affect site functionality.
5. How we use your information, and our lawful basis
We only use personal data where we have a valid legal basis to do so. The table below sets out our main processing activities.
Purpose | What we use | Lawful basis (UK/EU GDPR) |
|---|---|---|
Responding to enquiries and providing quotes | Name, email, message content | Legitimate interests / pre-contract steps |
Delivering client engagements | Contact and project data per engagement | Performance of a contract |
Sending the newsletter | Name, email, engagement data | Consent (opt-in), withdrawable at any time |
Understanding and improving the site | Usage and analytics data | Legitimate interests, or consent where cookies require it |
Meeting legal and accounting obligations | Invoicing and contract records | Legal obligation |
Where our lawful basis is legitimate interests, we have considered that our processing is proportionate, expected, and does not override your rights and freedoms. If our processing is based on consent (such as the newsletter), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Who we share data with
We do not sell personal data. We share it only with the following categories of recipient, each acting as a processor or, where applicable, an independent controller under their own privacy policy:
Each third-party processor is required, contractually or through its standard terms, to protect personal data to a standard consistent with this policy.
7. International data transfers
Some of the tools listed in Section 6 may store or process data outside the United Kingdom or European Economic Area, including in the United States. Where this occurs, we rely on recognised safeguards such as the UK International Data Transfer Addendum, EU Standard Contractual Clauses, or a recipient’s certification under an approved data transfer framework (such as the EU–U.S. and UK–U.S. Data Privacy Framework), to ensure your data continues to receive an appropriate level of protection.
8. Data retention
We keep personal data only for as long as it is needed for the purpose it was collected:
Where retention periods are not fixed by law, we periodically review whether continued storage is still necessary and delete or anonymise data that is not.
9. Your rights
9.1 If you are in the UK or EEA
Under UK GDPR and EU GDPR, you have the right to:
Access the personal data we hold about you
Correct inaccurate or incomplete data
Request erasure (“right to be forgotten”), where applicable
Restrict or object to certain processing, including for direct marketing
Request data portability, where technically feasible
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) or your local EU supervisory authority
9.2 If you are in California
Under the CCPA/CPRA, California residents have the right to know what personal information is collected, to request deletion, to correct inaccurate information, to opt out of the sale or sharing of personal information (we do not sell personal information), and to non-discrimination for exercising these rights.
9.3 Exercising your rights
To exercise any of the rights above, contact hello@wildflowercreative.co.uk. We will respond within one month (UK/EU) or 45 days (California), and may need to verify your identity before acting on a request.
10. Children’s privacy
The site and our services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Security
We apply appropriate technical and organisational measures — including access controls, encrypted connections (HTTPS), and limiting data access to those who need it — to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy as our tools, services, or legal obligations change. Material changes will be reflected by an updated “last reviewed” date at the top of this page. We encourage you to review this policy periodically.
13. Contact us
Questions about this policy or how your data is handled can be sent to hello@wildflowercreative.co.uk. We keep our client list small on purpose — the same precision applies to how we look after your information.