Privacy Policy

Last updated: August 2026

1. Introduction

WellSpring Strategies Ltd ("WellSpring", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. We are registered in Scotland and operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect information you provide directly to us, including:

  • Name and contact details (email address, phone number)
  • Company name and business information
  • Messages and enquiry content submitted via our contact form
  • Marketing consent preferences

We also automatically collect technical information when you visit our website, including your IP address, browser type and version, operating system, and pages visited.

In addition, we obtain business contact information from publicly available sources. These include the Companies House register, business and trade directories, publicly accessible company websites, and professional networking platforms. Information gathered this way is limited to business details such as company name, business address, business email address, business telephone number, and the name and role of a company director or other business contact.

3. How We Use Your Information

We use your information to:

  • Respond to your enquiries and deliver our services
  • Send administrative and service-related communications
  • Send marketing communications where you have given consent
  • Contact businesses about our services where we have a legitimate interest in doing so
  • Improve and personalise your experience on our website
  • Comply with our legal obligations

4. Marketing Communications

Where you have opted in, we may send you promotional and personalised marketing messages about our services. You can withdraw your consent at any time by replying STOP to any message or by contacting us at support@wellspringstrategies.co.uk. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

We also contact businesses we have not previously dealt with, to introduce services we believe are relevant to them. We do this on the basis of our legitimate interests in promoting our business, as permitted for corporate subscribers under the Privacy and Electronic Communications Regulations. Every such message identifies us clearly and gives a simple way to stop further contact, and we act on any such request without question. We do not send unsolicited marketing email to individuals or sole traders without their consent.

If you would like to know where we obtained your details, or you would prefer we did not hold them at all, contact us at the address above and we will tell you, and remove them if you ask.

5. Sharing Your Information

We do not sell your personal data. We may share it with:

  • Service providers who assist us in operating our business (e.g. email delivery, CRM tools)
  • Regulatory or law enforcement bodies where required by law
  • Successors in the event of a business transfer or acquisition

All third-party processors are required to handle your data securely and in accordance with applicable data protection law.

6. International Transfers

Some of the service providers we rely on are based outside the UK, principally in the United States. These include Vercel, which hosts this website and stores files submitted through our forms, Resend, which delivers email sent from those forms, and Instantly, which we use to send and manage business-to-business outreach email. Where personal data is transferred outside the UK, we rely on the UK International Data Transfer Addendum to the European Commission standard contractual clauses, or on UK adequacy regulations where they apply, so that your data continues to receive an equivalent level of protection. You can ask us for details of the safeguards in place at any time.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. When data is no longer required, we securely delete or anonymise it.

8. Cookies

We do not use cookies on this website, and we do not store or read any information on your device. We use Vercel Web Analytics and Vercel Speed Insights to understand how the site performs and which pages are visited. Neither uses cookies, and neither collects information that identifies you personally. Because no cookies are set, there is no consent banner and there is nothing for you to manage.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Opt out of marketing communications at any time
  • Request portability of your data
  • Withdraw consent where processing is based on consent
  • Object to processing carried out on the basis of our legitimate interests, including our business-to-business marketing
  • Request that we restrict how we process your data
  • Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, contact us at support@wellspringstrategies.co.uk.

10. Contact

WellSpring Strategies Ltd
Registered in Scotland, company number SC855248
22 Mackie Place, Elrick, Westhill, AB32 6AP, Scotland
Email: support@wellspringstrategies.co.uk