Privacy Policy

 

Last updated: 4 February 2026

This Privacy Policy explains how WRD MGMT Ltd (“we”, “us”, “our”) collects, uses, stores, and protects your personal data, and how we comply with the UK General Data Protection Regulation (UK GDPR), the EU GDPR (where applicable), and the Data Protection Act 2018.

 

1. Who We Are

 

Data Controller: WRD MGMT LIMITED

Company Number: 16269328 (Incorporated on 21 February 2025)

Registered Address: 46 High Street, Staple Hill, Bristol, England, BS16 5HW

Email Contact: canopycardiff@gmail.com

WRD MGMT LIMITED is responsible for determining how and why your personal data is processed.

 

2. What Personal Data We Collect

 

We may collect and process the following categories of personal data:

a) Contact Information

 

  • Email address

  • Mobile phone number

 

b) Marketing & Interaction Data

 

  • Subscription preferences (email and/or SMS)

  • Marketing consent status

  • Communication history (emails or SMS messages sent to you)

 

c) Technical & Usage Data

 

  • IP address

  • Device type, browser type, and operating system

  • Pages visited and interactions with our website

  • Referrer URLs

 

d) Event & Tracking Data

 

  • Website interactions captured via tracking technologies (see Section 6)

 

We do not intentionally collect special category personal data.

 

3. How We Collect Your Data

 

We collect personal data when you:

  • Sign up via our website forms

  • Subscribe to email or SMS updates

  • Interact with our website

  • Provide consent via cookie or tracking banners

 

Data may also be collected automatically via cookies, pixels, and similar technologies.

 

4. How We Use Your Personal Data

 

We use your personal data for the following purposes:

  • To send you event updates, announcements, and marketing communications

  • To manage email and SMS subscription lists

  • To improve our website, events, and marketing campaigns

  • To measure the effectiveness of advertising and promotions

  • To comply with legal and regulatory obligations

 

 

5. Legal Basis for Processing (GDPR)

 

Under GDPR, we rely on the following legal bases:

  • Consent – where you have actively opted in to receive email or SMS marketing

  • Legitimate Interests – for website analytics, marketing performance measurement, and service improvement (where these interests do not override your rights)

  • Legal Obligation – where processing is required by law

 

You may withdraw consent at any time (see Section 9).

 

6. Cookies, Pixels & Tracking Technologies

 

Our website uses cookies and tracking technologies, including:

  • Meta (Facebook & Instagram) Pixel

  • TikTok Pixel

  • Snapchat Pixel

 

These technologies help us:

  • Understand how users interact with our website

  • Measure and optimise advertising campaigns

  • Build custom and lookalike audiences for advertising

 

Data collected may include:

  • IP address

  • Device information

  • Pages visited and actions taken

 

These platforms may combine this data with information you have provided to them separately.

You can manage or withdraw your consent for non-essential cookies at any time via our cookie settings or banner.

 

7. Email & SMS Marketing

 

If you subscribe to our email or SMS communications:

  • You will only receive messages you have consented to

  • We may use third-party providers to deliver emails and SMS messages

  • Every email and SMS will include a clear method to unsubscribe

 

Standard network and messaging rates may apply for SMS messages.

 

8. Data Sharing & Third Parties

 

We may share personal data with trusted third parties, including:

  • Email marketing platforms

  • SMS messaging providers

  • Analytics and advertising platforms (Meta, TikTok, Snapchat)

  • IT and hosting providers

 

All third parties are required to process data securely and in accordance with GDPR.

We do not sell your personal data.

 

9. Your Data Protection Rights

 

Under GDPR, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request erasure of your data (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time

 

To exercise your rights, contact us using the details in Section 1.

 

10. Data Retention

 

We retain personal data only for as long as necessary:

  • While you remain subscribed to our communications

  • As required to meet legal, accounting, or regulatory obligations

 

You may unsubscribe at any time, after which your data will be removed or anonymised where appropriate.

 

11. Data Security

 

We take appropriate technical and organisational measures to protect personal data, including:

  • Secure servers and encrypted connections

  • Restricted access to personal data

  • Regular system monitoring

 

 

12. International Data Transfers

 

Some of our service providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses.

 

13. Changes to This Privacy Policy

 

We may update this Privacy Policy from time to time. The latest version will always be published on our website with the updated date.

 

14. Complaints

 

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

https://ico.org.uk

 

If you have any questions about this Privacy Policy or how we use your data, please contact us using the details above.