PRIVACY POLICY

Last Updated: 10 February 2025

1. Our Commitment to Privacy

At The Why House (“The Why House”, “we”, “us”, “our”), we are committed to safeguarding the privacy and security of your personal information.

This Privacy Policy explains:

  • What data we collect

  • How we use it

  • Your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK laws.

Your personal data belongs to you. We handle it with care, transparency, and respect — always.

2. Who We Are

The Why House is a UK-based hospitality consultancy and marketing agency specialising in creating, refining, and scaling hospitality businesses.
We act as the data controller for all personal data we collect and process.

Registered office: 20 July / 2025
Email: contact@thewhyhouse.co.uk

3. Data We Collect

We collect personal and non-personal data in the following categories:

a. Personal Data

  • Contact Details: Name, email address, telephone number, postal address.

  • Client Information: Business details, preferences, service history.

  • Payment Data: Information required for payment processing (we do not store full credit card information).

  • Feedback: Information provided through surveys, forms, or reviews.

b. Non-Personal Data

  • Usage Data: Information on how you interact with our website (pages visited, time spent).

  • Technical Data: IP address, browser type/version, device type, operating system.

c. Data from Other Sources

  • Publicly available business data.

  • Data from third-party partners, only where permitted by law or with your consent.

4. How We Use Your Information

We use your personal data for:

  • Service Delivery: To provide, manage, and improve our consultancy and marketing services.

  • Communication: To respond to enquiries, send service updates, and (with your consent) marketing materials.

  • Analytics & Improvement: To analyse usage trends and improve services.

  • Legal & Regulatory Compliance: To meet obligations under UK law, including tax and record-keeping.

  • Security: To detect and prevent fraud or misuse of our services.

5. Legal Basis for Processing

We process your personal data under the following lawful bases:

  • Contract: When necessary to perform a contract with you.

  • Consent: For marketing communications — you can withdraw consent at any time.

  • Legitimate Interests: For business purposes such as analytics and service improvements, balanced with your privacy rights.

  • Legal Obligation: When required by law.

6. Sharing Your Data

We only share data when necessary:

  • Service Providers: Third parties providing services like payment processing, hosting, or analytics (all bound by confidentiality agreements).

  • Legal Obligations: To comply with lawful requests from public authorities.

  • Corporate Transactions: In case of mergers, acquisitions, or asset sales.

We do not sell or rent your personal data.

7. Data Security

We implement security measures including:

  • Encrypted data storage and transfers

  • Access controls and authentication

  • Ongoing system monitoring

While we work hard to protect your information, no internet transmission is 100% secure.

8. Your Rights

Under UK GDPR, you have the right to:

  1. Access your personal data.

  2. Rectify inaccuracies.

  3. Erase your data (“right to be forgotten”) where applicable.

  4. Restrict processing.

  5. Object to certain types of processing.

  6. Data Portability — receive your data in a structured, machine-readable format.

To exercise these rights, contact us at contact@thewhyhouse.co.uk. We will respond within one month.

9. Data Retention

We retain personal data only for as long as necessary:

  • To fulfil the purposes for which it was collected

  • To comply with legal obligations

  • To resolve disputes and enforce agreements

When no longer required, data is securely deleted or anonymised.

10. International Transfers

If your data is transferred outside the UK or EEA, we will ensure:

  • Transfers are made to countries with an adequacy decision; or

  • Use of Standard Contractual Clauses approved by the ICO.

11. Cookies

We use cookies to:

  • Ensure site functionality

  • Analyse performance and user behaviour

  • Personalise content

You can manage or disable cookies via your browser settings. See our [Cookie Policy] for more details.

12. Third-Party Websites

Our website may contain links to external sites. We are not responsible for their content or privacy practices. Please review their privacy policies before sharing personal information.

13. Updates to This Policy

We may update this Privacy Policy from time to time. Significant changes will be posted on our website and, if appropriate, communicated directly to you.

14. Contact Us

Data Protection Officer
The Why House
Email: contact@thewhyhouse.co.uk

15. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk