WJDIGITAL LTD ("we", "us" or "our") is a United Kingdom company providing cloud infrastructure design and provision, media streaming distribution, high-load web platform engineering, content delivery network management, application programming interface integration, DevOps and continuous delivery advisory services, and cybersecurity consulting. This Privacy Policy explains how we collect, use, store, share, retain and protect personal data when you visit wjdigital.codes, submit a routing request, enter into a commercial engagement, communicate with our team, or otherwise interact with our business.
We are committed to processing personal data lawfully, fairly and transparently in accordance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (as amended), and guidance issued by the Information Commissioner's Office (ICO). Where we process personal data relating to individuals in the European Economic Area in connection with offering goods or services or monitoring behaviour, we also take account of the EU General Data Protection Regulation to the extent it applies.
This Policy applies to personal data processed through our website at wjdigital.codes, email and telephone communications, project delivery tools that we control, client portals or shared workspaces we administer, and offline interactions at our premises or client sites where we record contact and engagement information. It does not apply to third-party websites, products or services that may be linked from our materials, nor does it govern processing carried out solely by our clients as independent controllers of their own end-user data.
By using our website or providing personal data to us, you acknowledge that you have read this Privacy Policy. Where we rely on consent, we will obtain it in a clear and affirmative manner. Where we rely on other lawful bases, we explain those bases below. If you do not agree with this Policy, you should not use our website or submit personal data to us except where required for a contractual relationship you have already entered into.
The data controller responsible for personal data described in this Policy is WJDIGITAL LTD. Our principal place of business is 195-197 Wood Street, London, London, E17 3NU United Kingdom. Our public website is operated at the domain wjdigital.codes.
For privacy-related enquiries, data subject requests, complaints about our processing, or notices concerning a suspected personal data breach affecting you, please contact us using the following channels. Email should be sent as plain correspondence to service@wjdigital.codes. Telephone contact is available on +44 20 7946 0192 during ordinary United Kingdom business hours. Written correspondence may be posted to 195-197 Wood Street, London, London, E17 3NU United Kingdom, marked for the attention of the Privacy Contact.
We do not currently appoint a statutory Data Protection Officer under Article 37 of the UK GDPR because our core activities do not consist of processing operations that require large-scale regular and systematic monitoring of data subjects, nor large-scale processing of special category data or criminal offence data as a principal activity. We nevertheless maintain an internal privacy contact who coordinates compliance, responds to rights requests, and liaises with the ICO where required.
If you are dissatisfied with our response to a privacy matter, you have the right to lodge a complaint with the Information Commissioner's Office. The ICO is the supervisory authority for data protection in the United Kingdom. Further information is available from the ICO's public channels. We would welcome the opportunity to resolve concerns directly before a formal complaint is made.
The categories of personal data we process depend on how you interact with WJDIGITAL LTD. We collect only what is reasonably necessary for the purposes described in this Policy. We do not knowingly seek special category data through our public website forms. If special category data is disclosed to us incidentally, we will handle it with heightened care and delete it where it is not required for a lawful purpose.
This includes your name, job title, organisation name, business email address, telephone number, postal address, and preferred contact method. We obtain this information when you submit a contact or routing request, request a proposal, enter into a contract, attend a meeting, or update your details with us. For corporate clients, we may also record the identity of authorised signatories, technical leads, billing contacts and escalation points.
This includes information about your organisation's technology environment to the extent shared with us for scoping and delivery, project requirements, service preferences, contract references, purchase order numbers, invoicing details, payment status at account level (not full card data where processed by a payment provider), meeting notes, statements of work, change requests, acceptance records, and correspondence relating to cloud infrastructure, media streaming, CDN, API, DevOps or cybersecurity engagements.
When you visit wjdigital.codes we may process internet protocol address, browser type and version, device type, operating system, referring uniform resource locator, pages viewed, time and date of access, approximate location derived from IP address at city or region level, and diagnostic logs necessary to secure and operate the website. Further detail on cookies and similar technologies is set out in our Cookie Policy.
Emails, messages, call notes and attachments you send to service@wjdigital.codes or discuss by telephone on +44 20 7946 0192 may contain personal data. We process this content to respond to enquiries, deliver services, maintain records of instructions, and evidence contractual performance. You should avoid sending unnecessary sensitive personal data in ordinary correspondence.
If you apply for a role or propose to supply services to WJDIGITAL LTD, we may process curriculum vitae information, professional history, right-to-work indicators where lawfully required, references provided with consent or where otherwise lawful, and commercial due diligence information about supplier contacts.
We collect personal data directly from you when you complete forms on wjdigital.codes, email us, telephone us, meet us in person, or use collaboration tools we provide. We may also receive personal data from your colleagues or authorised representatives who nominate you as a project contact.
We may obtain limited professional contact data from publicly available business sources, industry directories, or introductions from trusted partners, solely for legitimate business development consistent with the soft opt-in and electronic marketing rules that apply in the United Kingdom. We do not purchase consumer marketing lists for cold consumer advertising.
Technical data is collected automatically through server logs, security tooling and, where enabled, cookies or similar technologies as described in our Cookie Policy. Where we act as a processor for a client, personal data may be provided by that client under a written data processing agreement; in those cases the client's privacy notice governs the primary relationship with end users, and this Policy explains our role as processor.
Under the UK GDPR, we must have a lawful basis for each processing purpose. The principal bases we rely upon are: performance of a contract or steps taken at your request before entering a contract; compliance with a legal obligation; our legitimate interests or those of a third party, balanced against your rights and freedoms; and consent where required, particularly for certain cookies or electronic marketing.
We process identity and contact data and the content of your enquiry to understand your requirements for cloud infrastructure, media streaming, high-load platforms, CDN, APIs, DevOps or cybersecurity consulting, and to provide an initial response. Lawful basis: legitimate interests in developing and responding to business opportunities, and where applicable steps preparatory to a contract.
We process engagement, billing and delivery data to negotiate statements of work, perform services, manage change control, invoice, collect payment, provide support, and maintain continuity records. Lawful basis: performance of a contract. Related records may also be retained under legitimate interests for dispute resolution and under legal obligations for tax and accounting.
We process technical and usage data to deliver website content, maintain availability, detect abuse, diagnose faults, improve navigation and content clarity, and protect against cyber threats. Lawful basis: legitimate interests in operating a secure and effective commercial website. Non-essential cookies are used only with consent as described in the Cookie Policy.
We may process personal data to comply with legal, regulatory and law enforcement requirements applicable in England and Wales, to respond to court orders, to conduct audits, to manage insurance, and to maintain records required by company and tax law. Lawful basis: legal obligation and, where applicable, legitimate interests in corporate governance.
Where permitted by law, we may send service-related notices and, with consent or under the UK soft opt-in for similar products and services to existing customers, limited professional updates about WJDIGITAL LTD offerings. You may object to marketing at any time by contacting service@wjdigital.codes. Lawful basis: consent or legitimate interests, as applicable.
We process candidate and supplier contact data to assess suitability, manage onboarding, and administer commercial relationships. Lawful bases: steps prior to contract, performance of contract, legal obligation where right-to-work checks apply, and legitimate interests in selecting competent personnel and suppliers.
Where we rely on legitimate interests, we assess that the processing is necessary for a genuine interest, that it is proportionate, and that it does not override your interests or fundamental rights. Relevant interests include operating a professional technology consultancy, securing digital systems, preventing fraud and abuse, improving service quality, maintaining business continuity documentation, and communicating with business contacts in a B2B context.
You have the right to object to processing based on legitimate interests. If you object, we will cease the processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims. Objections may be sent to service@wjdigital.codes with sufficient detail for us to identify the processing concerned.
Our website may use cookies and similar technologies to support essential site functions, remember preferences, measure performance, and, where consented, understand how visitors use wjdigital.codes. Detailed information about categories of cookies, retention periods, third-party involvement and how to manage consent is set out in our Cookie Policy available at cookie-policy.html.
Essential cookies that are strictly necessary for the transmission of a communication or for a service you have expressly requested may be used without consent under applicable electronic privacy rules. All other cookies require your prior consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
We do not sell personal data. We disclose personal data only where necessary for the purposes in this Policy, and subject to appropriate contractual and security controls.
We engage carefully selected processors to host websites and email, provide cloud infrastructure for our internal operations, support customer relationship tooling, enable secure file transfer, provide cybersecurity monitoring, and assist with accounting or professional advisory services. These providers process personal data only on documented instructions and under written agreements meeting UK GDPR Article 28 requirements.
We may share limited personal data with solicitors, accountants, auditors and insurers where necessary to obtain advice, manage claims, or meet professional obligations, subject to confidentiality.
If WJDIGITAL LTD considers or completes a merger, acquisition, restructuring or sale of assets, personal data may be disclosed to advisers and counterparties under confidentiality arrangements as part of due diligence and transfer, consistent with UK data protection law.
We may disclose personal data where required by law of England and Wales, by order of a competent court or tribunal, or to protect the vital interests of a person, to defend our legal rights, or to investigate suspected fraud or security incidents relating to our services or wjdigital.codes.
In the course of delivering collaborative services, contact details of named project participants may be visible to other authorised participants on the same engagement. We expect clients to ensure that sharing such contacts within their organisation is lawful.
WJDIGITAL LTD is established in the United Kingdom. Personal data is primarily processed within the United Kingdom. Some processors or subprocessors may be located outside the United Kingdom, including in the European Economic Area or other jurisdictions.
Where personal data is transferred from the United Kingdom to a third country that has not been assessed as adequate by the UK government, we implement appropriate safeguards. These may include the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other mechanisms approved under UK GDPR Chapter V, together with transfer risk assessments where required.
If you are located in the EEA and we transfer personal data from the EEA to a third country, we will rely on adequacy decisions, standard contractual clauses, or other lawful transfer tools under the EU GDPR as applicable. You may request further information about the safeguards we use by contacting service@wjdigital.codes.
Clients who instruct us to deploy workloads or process data in specific regions as part of cloud infrastructure or CDN services remain responsible for their own transfer assessments in respect of their end-user data. Our role as processor or service provider will be defined in the relevant contract and data processing schedule.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, reporting and dispute-resolution requirements. Retention periods vary by category.
At the end of the applicable retention period, we securely delete or irreversibly anonymise personal data, or archive it in a form that is no longer identifiable where archival is required by law. Backup media may retain residual copies for a limited additional period until overwritten in the ordinary backup cycle, subject to continued confidentiality and access controls.
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. Measures are selected according to the state of the art, implementation costs, and the nature, scope, context and risks of processing, particularly given our work with cloud infrastructure, APIs, high-load platforms and cybersecurity consulting.
Organisational measures include access based on need-to-know, staff awareness of confidentiality, vendor due diligence, incident response procedures, and clear allocation of responsibility for privacy within the business. Technical measures may include encryption in transit for website and email pathways where supported, credential hygiene, network segmentation for internal systems, logging and monitoring for anomalous access, secure configuration baselines, and controlled use of privileged accounts.
No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect personal data, we cannot guarantee absolute security. You are responsible for keeping any credentials issued to you confidential and for using secure networks when submitting sensitive information.
In the event of a personal data breach likely to result in a risk to individuals' rights and freedoms, we will notify the ICO without undue delay and, where feasible, within seventy-two hours of becoming aware, as required by UK GDPR. Where the breach is likely to result in a high risk to individuals, we will also communicate with affected data subjects without undue delay, unless an exception applies.
Subject to conditions and exemptions in the UK GDPR and Data Protection Act 2018, you have the following rights in relation to personal data we hold about you as controller.
To exercise any of these rights, contact service@wjdigital.codes or write to 195-197 Wood Street, London, London, E17 3NU United Kingdom, or telephone +44 20 7946 0192. We may need to verify your identity before fulfilling a request. We will respond without undue delay and in any event within one month of receipt of a valid request, extendable by a further two months for complex or numerous requests, in which case we will inform you of the extension and reasons.
Some rights are not absolute. We may refuse or partially refuse a request where an exemption applies, for example where disclosure would adversely affect the rights of others, or where we must retain data for legal claims or statutory obligations. We will explain our reasons where we are permitted to do so.
If you believe we have not handled your personal data in accordance with the law, you may complain to the ICO. We encourage you to contact us first so that we can attempt to resolve the matter.
Our website and services are directed to businesses and professional adults. We do not knowingly collect personal data from children under sixteen years of age through wjdigital.codes. If you believe a child has provided personal data to us, please contact service@wjdigital.codes and we will take steps to delete such data where appropriate.
When WJDIGITAL LTD designs, builds, operates or advises on cloud infrastructure, media streaming platforms, CDN configurations, APIs, DevOps pipelines or cybersecurity controls for a client, we may process personal data on behalf of that client as a processor. In those circumstances:
The client remains the controller of end-user or employee personal data within their systems, unless a different allocation is agreed in writing. We process such data only on documented instructions, for the purposes of delivering the contracted services, and in accordance with a data processing agreement that addresses subject matter, duration, nature and purpose of processing, types of personal data, categories of data subjects, and our obligations under UK GDPR Article 28.
We will not engage a subprocessor for client personal data without prior general or specific authorisation as set out in the relevant agreement, and we will flow down equivalent data protection obligations. We will assist the client, taking into account the nature of processing, with responding to data subject requests, security, breach notification, and data protection impact assessments where reasonably required and scoped.
Upon termination of processing services, we will delete or return client personal data at the client's choice, subject to retention required by law of England and Wales, and will delete existing copies unless storage is required by law. Certification of deletion may be provided upon request where commercially reasonable.
Where a type of processing, particularly using new technologies, is likely to result in a high risk to individuals' rights and freedoms, we will carry out a data protection impact assessment before proceeding, in line with UK GDPR Article 35 and ICO guidance. Given our industry context, examples may include large-scale monitoring tooling, novel analytics on streaming audiences where we act as controller, or extensive profiling. Where residual high risk remains, we will consult the ICO before processing where required.
We take reasonable steps to keep personal data accurate and up to date. Please inform us promptly of changes to your contact details by writing to service@wjdigital.codes. If you provide personal data about another person, you must ensure you have a lawful basis to do so and that the individual is informed about this Policy where appropriate.
wjdigital.codes may contain links to third-party websites, including technology vendors, standards bodies or partner resources. Those sites operate under their own privacy practices. We are not responsible for the content or privacy practices of third-party sites. You should review their notices before providing personal data to them.
We may update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, our services, or our processing activities. The updated version will be published on wjdigital.codes with a revised last updated date. Material changes will be highlighted on the policy page or communicated to active clients where appropriate. Continued use of the website after publication constitutes notice of the updated Policy for website visitors. Contractual processing terms with clients will be varied only in accordance with the applicable agreement.
This Privacy Policy is designed to meet requirements applicable to WJDIGITAL LTD under the laws of England and Wales and United Kingdom data protection legislation. Disputes relating to our handling of personal data as controller may be brought before the courts of England and Wales, without prejudice to your right to lodge a complaint with the ICO.
For any question about this Privacy Policy or our personal data practices, please contact WJDIGITAL LTD at service@wjdigital.codes, by telephone on +44 20 7946 0192, or by post at 195-197 Wood Street, London, London, E17 3NU United Kingdom. Please include sufficient information to allow us to identify your enquiry, including any account or project reference if you are an existing client.
Thank you for trusting WJDIGITAL LTD with your personal data. We are committed to protecting privacy while delivering reliable cloud infrastructure, media streaming, high-load web platforms, CDN, API, DevOps and cybersecurity services through clear and accountable practices.
Accountability is a core principle of the UK GDPR. WJDIGITAL LTD maintains internal records of processing activities proportionate to our size and the nature of our operations. These records describe the purposes of processing, categories of data subjects and personal data, categories of recipients, retention schedules, and general descriptions of security measures. Where we act as a processor, we maintain records of categories of processing carried out on behalf of each controller client.
We review our privacy notices, contracts and security controls periodically, and following significant changes to systems or services. Staff who handle personal data receive guidance appropriate to their role. Vendors that process personal data on our behalf are assessed for security and confidentiality commitments before onboarding and are subject to written terms.
If you request information about our accountability measures beyond what is published in this Policy, we will provide a proportionate summary where disclosure does not compromise security or confidential commercial information. Formal data subject access requests remain the proper channel for obtaining your own personal data.
We do not intentionally collect special category personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for unique identification, health data, or data concerning a person's sex life or sexual orientation) through wjdigital.codes. We also do not intentionally collect criminal offence data through our public website.
If such data is volunteered by you in free-text correspondence, we will assess whether we can delete it. If processing becomes necessary in a limited employment or legal claims context, we will identify an Article 9 UK GDPR condition (and Schedule 1 Data Protection Act 2018 condition where required) and apply heightened safeguards. Clients who instruct us to process special category data within their systems must ensure they have a lawful basis and must document instructions accordingly in the data processing agreement.
Electronic marketing to individuals is regulated by the Privacy and Electronic Communications Regulations and UK GDPR. We distinguish service messages that are necessary to perform a contract or provide information you have requested from promotional messages about new services.
Service messages may include invoices, security notices, project status updates, and changes to terms that affect an active engagement. These are not marketing and may be sent without marketing consent.
Promotional emails about WJDIGITAL LTD cloud, streaming, CDN, API, DevOps or cybersecurity offerings will be sent only where we have a lawful basis, including consent or the soft opt-in for similar products and services where you are an existing customer and were given a simple opportunity to refuse at the time your details were collected and in each subsequent message. Business-to-business email marketing to corporate subscribers is approached carefully and with respect for opt-out requests.
Every promotional email will include a clear means to opt out. You may also opt out by contacting service@wjdigital.codes or telephoning +44 20 7946 0192. Opt-out requests will be actioned promptly. We may retain your email address on a suppression list to ensure we do not contact you again for marketing.
Contact and routing request forms on wjdigital.codes are designed to collect only fields needed to respond to your enquiry. Mandatory fields are limited. Optional fields should be completed only where helpful. We may use technical measures such as rate limiting, captcha-like challenges, honeypot fields or IP reputation checks to reduce automated abuse. These measures process limited technical data for security based on legitimate interests.
Server logs may record failed login attempts to administrative areas, unusual traffic patterns, and blocked requests. Logs are used for security operations and may be shared with cybersecurity specialists under confidentiality when investigating incidents. Log data is not used to build marketing profiles of individuals.
Our industry involves architectures that may distribute content and application traffic across multiple geographic points of presence. When we advise on or configure CDN and cloud regions for a client, the client's choices about where end-user data is processed are commercial and compliance decisions for the client as controller.
We will highlight known transfer and residency implications where they fall within the agreed scope of work. We do not guarantee that a particular cloud provider's region map will remain static. Clients should review provider documentation and their own transfer tools. Where WJDIGITAL LTD is the controller of website visitor data for wjdigital.codes, that processing is described in this Policy and is separate from client workload data.
If we deploy analytics tools on wjdigital.codes, we will configure them to minimise personal data where practicable, for example by IP truncation where supported, and we will use non-essential analytics cookies only with consent. Analytics help us understand which service pages are useful, how visitors navigate from Home to About, Services, Portfolio and Contact, and where technical errors occur.
We do not use analytics to make solely automated decisions with legal effects about individuals. Aggregated statistics that do not identify individuals may be retained longer for trend analysis.
We may conduct meetings by telephone or video conference. We do not routinely record meetings. If a recording is proposed for accuracy of complex technical discussions about infrastructure or streaming architecture, we will inform participants in advance and explain the purpose, retention and access. Where consent is required, we will obtain it. Participants may object to recording, in which case we will use written notes instead where feasible.
Commercial confidentiality obligations in our contracts protect business secrets, architecture diagrams and pricing. Privacy obligations protect personal data of identifiable individuals. Both regimes may apply to the same document. For example, a network diagram that includes named administrator contacts engages both confidentiality and data protection. Staff are instructed to handle such materials carefully under both frameworks.
Privacy and security awareness form part of our professional culture. Team members working on client delivery are expected to follow least-privilege access, avoid unnecessary copying of personal data into unmanaged channels, and escalate suspected incidents promptly. Subcontractors are held to equivalent expectations through contract and oversight proportionate to their role.
This Privacy Policy should be read alongside our Cookie Policy, Terms of Service and Terms and Conditions, which are available from the legal routes section of wjdigital.codes. Contractual data processing schedules, if agreed with a client, prevail over this Policy to the extent of any conflict regarding processor activities for that client.
For general information about your data protection rights in the United Kingdom, you may consult materials published by the Information Commissioner's Office. Those materials are independent of WJDIGITAL LTD and we are not responsible for their content.
If any provision of this Privacy Policy is found to be invalid or unenforceable by a court of competent jurisdiction in England and Wales, the remaining provisions will continue in full force and effect. Headings are for convenience only and do not affect interpretation.
WJDIGITAL LTD thanks you for reviewing this Privacy Policy. For clarification of any section, contact service@wjdigital.codes or telephone +44 20 7946 0192. Our postal address remains 195-197 Wood Street, London, London, E17 3NU United Kingdom. The domain for our public site is wjdigital.codes. We aim to respond to privacy questions promptly and in plain language while remaining faithful to our legal obligations under UK GDPR and the Data Protection Act 2018.
