Privacy Policy

1. Data Controller

The data controller is Wildernesscleana, 372 Ealing Road, Wembley, London HA0 1BH, United Kingdom. Email: writetous@wildernesscleana.world. Telephone: +44 7767 224829.

2. Applicable Law

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR) as amended.

3. Data We Collect

• Identity data: name, title
• Contact data: email address, telephone number, postal address
• Communication data: messages sent via our contact form or email
• Transaction data: payment references and enrolment details (payment card data is processed by our payment provider, not stored by us)
• Technical data: IP address, browser type, device information, pages visited, referral source
• Preference data: cookie consent choices stored in localStorage
• Programme data: challenge preferences, forum posts, and participation records

4. Purposes and Lawful Bases

• Contract (Article 6(1)(b)): delivering programmes you have purchased or enquired about
• Legitimate interests (Article 6(1)(f)): responding to enquiries, improving services, fraud prevention, and website security — balanced against your rights
• Consent (Article 6(1)(a)): non-essential cookies, marketing communications where opt-in is required
• Legal obligation (Article 6(1)(c)): tax records, responding to lawful requests from authorities

5. Data Retention

• Contact form enquiries: 24 months from last contact, unless a business relationship continues
• Enrolment and programme records: 36 months after programme completion
• Financial records: 6 years as required by HMRC
• Technical server logs: 12 months
• Cookie preferences: until you clear browser storage or withdraw consent

6. Data Sharing

We do not sell personal data. We may share data with:

• Service providers (hosting, email, payment processing) under UK GDPR-compliant data processing agreements
• Professional advisers bound by confidentiality obligations
• Law enforcement or regulators when legally required

We do not share individual participant data with organisational clients without explicit consent.

7. International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including UK International Data Transfer Agreements or adequacy regulations approved by the Secretary of State.

8. Security

We implement appropriate technical and organisational measures including TLS encryption, access controls, staff training, and periodic security reviews. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Rectify inaccurate data
• Erase data in certain circumstances ("right to be forgotten")
• Restrict processing
• Object to processing based on legitimate interests
• Data portability for automated processing based on consent or contract
• Withdraw consent at any time without affecting prior lawful processing
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113

To exercise your rights, email writetous@wildernesscleana.world. We respond within one calendar month, extendable by two further months for complex requests.

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

11. Children

Our services are for adults aged 18 and over. We do not knowingly collect data from anyone under 18.

12. Changes

We may update this policy periodically. Material changes will be indicated by updating the date above. Continued use after changes constitutes acceptance where permitted by law.