Privacy policy
Last updated .
1. Introduction
This policy explains how personal data is collected, used and protected when you use this website or send a message through its contact form. Wicked Origami Ltd processes personal data lawfully, fairly and transparently, in accordance with UK data protection law.
2. Data controller
For the purposes of the UK GDPR, Wicked Origami Ltd (company no. 16168390, registered in England and Wales) is the data controller for personal data submitted through this website.
3. What is collected
The contact form collects your name, email address, organisation and country if you give them, the subject you choose, and the message itself. The form provider may also process limited technical metadata - IP address, browser information and the time of submission - for security and abuse prevention.
The website itself sets no cookies and runs no analytics, so simply reading it collects nothing.
4. How it is processed
Contact form submissions are delivered by Formspree, which acts as a data processor on behalf of Wicked Origami Ltd. Data submitted through the form is transmitted to Formspree and delivered by email, for the sole purpose of responding to your enquiry.
5. Purpose and legal basis
Personal data is processed only to respond to enquiries and to keep limited records of correspondence. The lawful bases are legitimate interests (Article 6(1)(f)) and, where applicable, consent (Article 6(1)(a)), which you give by ticking the box on the form.
6. Retention
Personal data is kept only as long as is reasonably necessary for the purpose it was collected, after which it is securely deleted.
7. Sharing and sub-processors
Personal data is never sold, rented or otherwise disclosed to third parties, except as necessary to deliver the contact form service. Formspree may engage approved sub-processors strictly for service delivery, subject to contractual and security safeguards.
8. International transfers
Formspree may process personal data outside the United Kingdom, including in the United States. Where that happens, appropriate safeguards apply, including standard contractual clauses and additional technical and organisational measures.
9. Security
Reasonable technical and organisational measures protect personal data against unauthorised access, loss or disclosure. No method of transmission is entirely secure, and this website makes no claim that it is.
10. Your rights
You have the right to:
- Access the personal data held about you
- Ask for it to be corrected or erased
- Restrict or object to its processing
- Withdraw consent where processing relies on it
- Complain to the Information Commissioner's Office (ICO)
11. Third-party processing
Form submissions are additionally subject to Formspree's own privacy policy, published at formspree.io/legal/privacy-policy.
12. Contact
Questions about this policy may be sent to hello@wo.dev, or by post to Wicked Origami Ltd, 483 Green Lanes, London N13 4BS, United Kingdom.