How Wysper Labs handles personal information.

1. Introduction

Wysper Labs is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect personal information when you:

• Visit our website;
• Use our services;
• Submit customer feedback through the Wysper Reviews platform;
• Contact us directly.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Wysper Labs is currently operated as a sole trader business. References to "Wysper Labs" within this Privacy Policy refer to the trading activities carried out by James Dunford under the Wysper Labs trading name.

2. Who We Are

Wysper Labs is a trading name of James Dunford ("Wysper Labs", "we", "our" or "us").

We provide customer feedback, reputation management and business intelligence services to businesses throughout the United Kingdom.

For the purposes of UK data protection law, Wysper Labs may act as either a Data Controller or a Data Processor depending on the services being provided.

3. Information We Collect

Information You Provide

We may collect:

• Name
• Email address
• Telephone number
• Business information
• Feedback messages
• Staff member mentions contained within feedback
• Any other information voluntarily submitted through our forms

Technical Information

When you visit our website, we may automatically collect:

• IP address
• Browser type
• Device information
• Pages visited
• Date and time of access

Customer Feedback Information

When you submit feedback through a Wysper Reviews form, we may collect:

• Your name, if provided
• Contact details, if provided
• Feedback comments
• Customer experience information
• Service-related information relevant to the feedback

4. How We Use Your Information

We use personal information to:

• Provide and operate our services;
• Deliver customer feedback to businesses using Wysper Reviews;
• Generate customer experience insights and reports;
• Respond to enquiries and support requests;
• Improve our products and services;
• Detect and prevent misuse of our services;
• Meet legal and regulatory obligations.

5. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

Legitimate Interests

To help businesses:

• Understand customer experiences;
• Improve service quality;
• Respond to customer concerns;
• Monitor reputation and customer satisfaction.

Contract

Where processing is necessary to provide services to our customers.

Legal Obligation

Where we are required to comply with applicable laws and regulations.

Consent

Where consent is required, we will obtain it before processing and you may withdraw consent at any time.

6. Wysper Reviews Platform

Wysper Reviews enables businesses to collect customer feedback, monitor customer sentiment and generate customer experience insights.

For customer feedback collected through the Wysper Reviews platform, the business receiving the feedback is generally the Data Controller and Wysper Labs acts as a Data Processor on their behalf.

Wysper Labs processes such information only as necessary to provide the services requested by the business and in accordance with applicable data protection laws.

Where a customer submits feedback through the Wysper Reviews platform, that information may be made available to the relevant business for the purposes of:

• Customer service
• Complaint resolution
• Service improvement
• Customer experience analysis
• Reputation management

7. Sharing Information

We do not sell personal information.

We may share information with trusted service providers that help us operate our services, including:

• Airtable, for data storage
• Tally, for form collection
• Make.com, for automation
• Google Workspace / Gmail, for email delivery
• Twilio, where SMS services are used

Artificial intelligence service providers may be used in future to generate summaries, insights or suggested responses where such features are offered. Appropriate safeguards will be implemented before personal information is processed for these purposes.

These providers are only given access to information necessary to perform their services.

8. International Data Transfers

Some of our service providers may process information outside the United Kingdom.

Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place, including approved contractual protections and recognised international transfer mechanisms.

9. Data Retention

We retain information only for as long as necessary to fulfil the purposes for which it was collected.

Typical retention periods include:

• Customer feedback records: up to 24 months
• Reporting and analytical data: up to 36 months
• Support enquiries: up to 24 months

Information may be retained longer where required by law or where necessary to establish, exercise or defend legal claims.

10. Security

We take appropriate technical and organisational measures to protect personal information, including:

• Secure cloud-based storage
• Access controls
• Password protection
• Multi-factor authentication where available
• Restricted access to systems and information

While no system can guarantee absolute security, we work to protect information against unauthorised access, disclosure, alteration or loss.

11. Your Rights

Under UK GDPR, you may have the right to:

• Access your personal information;
• Correct inaccurate information;
• Request deletion of your information;
• Restrict processing;
• Object to processing;
• Request transfer of your information;
• Withdraw consent where processing is based on consent.

To exercise your rights, please contact us using the details provided in this policy.

We aim to respond to requests within one month.

12. Complaints

If you have concerns about how we handle personal information, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

13. Cookies

Our website may use cookies and similar technologies to improve functionality and analyse website usage.

Where required by law, cookie consent mechanisms will be provided.

You may control cookies through your browser settings.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website and will include the effective date shown at the top of this document.

Where significant changes are made, we may provide additional notice where appropriate.

15. Contact Us

If you have any questions regarding this Privacy Policy or our handling of personal information, please contact:

Last Updated: June 2026