PRIVACY POLICY
Your privacy matters.
Last updated: 23 September 2026
Wislo respects your privacy and is committed to protecting your personal information. This privacy policy explains what information we collect, why we collect it, how we use it and the rights you have in relation to your personal data.

 

01 — Who we are
Wislo is a strategic advisory business operated by Wislo Holdings Ltd, a company registered in Scotland under company number SC878310.

 

Our registered/business address is:

 

Wislo Holdings Ltd
Bonnington Bond
2 Anderson Place
Edinburgh
EH6 5NP
Scotland

 

For questions about this privacy policy or how we use your personal information, contact us at contact@wislo.co.uk.
For the purposes of UK data protection law, Wislo Holdings Ltd is the data controller for the personal information described in this policy.

02 — Information we collect
We aim to collect only the information we reasonably need.

When you contact us through our website, by email or through another business communication channel, we may collect information such as your name, organisation, email address, telephone number and any information you choose to provide about your enquiry, project or organisation.

If we work with you, we may also hold information relating to our professional relationship, including correspondence, project information, meeting notes, proposals, contracts, invoices and relevant contact details.

Our website may also collect limited technical information about how it is accessed and used, such as browser and device information, pages visited, approximate location derived from IP address and interactions with the website.

We do not intentionally collect special category personal data through this website and ask that you do not provide sensitive personal information unless it is genuinely necessary.

03 — How we use your information
We may use personal information to:

​

• respond to enquiries and requests;

• communicate with prospective clients, clients, partners and suppliers;

• understand an organisation's requirements and explore potential projects or opportunities;

• prepare proposals, quotations and agreements;

• deliver and manage our advisory services and professional relationships;

• maintain appropriate business, financial and administrative records;

• operate, secure and improve our website and digital services;

• understand how visitors use our website;

• comply with legal, regulatory and contractual obligations; and

• protect our legitimate business interests.

• ​

We do not sell personal information.

04 — Our lawful basis for using your information
UK data protection law requires us to have a lawful basis for using personal information. Depending on the circumstances, we may rely on:

Contract — where using your information is necessary to enter into or perform a contract with you, including taking steps you have requested before entering into a contract.

Legitimate interests — where using information is reasonably necessary for operating and developing our business, responding to business enquiries, maintaining professional relationships, improving our services, protecting our systems or pursuing appropriate commercial opportunities, provided those interests are not overridden by your rights and interests.

Legal obligation — where we need to use or retain information to meet legal, tax, accounting or regulatory requirements.

Consent — where we specifically ask for your permission, for example for certain non-essential website technologies or

communications. Where we rely on consent, you may withdraw it at any time.

The ICO requires organisations to determine and document an appropriate lawful basis for each processing purpose; legitimate interests also requires consideration of necessity and the individual's rights and reasonable expectations.

05 — Who we share information with
We do not sell or trade personal information.

We may use trusted service providers to help operate our business and website. These may include providers of website hosting and management, business email and collaboration tools, analytics, consent management, accounting and other professional or technology services.

Our website is currently built and hosted using Wix, and we use Google Workspace for business email and collaboration. We use Usercentrics to manage website cookie and tracking consent.

We may also use Google Analytics to understand how visitors use the website. Where analytics technologies require consent, they will only be used in accordance with the choices you make through our cookie consent system.

We may share information with professional advisers, contractors or delivery partners where this is reasonably necessary for a project or business relationship and where appropriate safeguards are in place.

We may also disclose information where required by law or where necessary to establish, exercise or defend legal rights.
06 — Cookies and website technologies

Our website uses cookies and similar technologies. Some are necessary for the website to function correctly, while others may help us understand how the website is being used.

We use Usercentrics to provide visitors with control over non-essential cookies and tracking technologies.

When you first visit the website, you can accept, deny or manage relevant cookie preferences. You can also change or withdraw your choices later.

Further information about the cookies and technologies used on this website is available through our cookie settings and Cookie Policy.

The ICO states that visitors should be told what cookies are used for and that, where cookies are not strictly necessary, consent will generally be required unless a relevant exception applies.

07 — How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet any legal, accounting or reporting requirements.

The appropriate retention period will depend on the nature of the information and our relationship with you.
For example, an initial enquiry that does not lead to an ongoing relationship may be retained for a limited period where it is reasonable to do so for follow-up or business record purposes. Information relating to clients, contracts, financial transactions or completed projects may need to be retained for longer to meet legal, tax, insurance or professional requirements.

When information is no longer required, we will delete it or otherwise dispose of it appropriately.

08 — International data transfers
Some of the technology providers we use operate internationally. This means personal information may sometimes be processed or stored outside the United Kingdom.

Where this occurs, we expect our service providers to use appropriate safeguards for international transfers in accordance with applicable data protection law, such as relevant adequacy regulations or approved contractual safeguards.

09 — Your rights
Depending on the circumstances, UK data protection law gives you rights relating to your personal information. These can include the right to:

​

• request access to personal information we hold about you;

• ask us to correct inaccurate or incomplete information;

• ask us to delete information in certain circumstances;

• ask us to restrict how information is used;

• object to certain uses of your information;

• receive certain information in a portable format; and

• withdraw consent where our use of information is based on your consent.

 

These rights are not absolute and may depend on the circumstances and the lawful basis on which we are using your information.

Where we rely on legitimate interests, you have the right to object to the processing of your personal information in certain circumstances.

To exercise a data protection right, contact contact@wislo.co.uk.

You also have the right to complain to the Information Commissioner's Office (ICO) if you are concerned about how your personal information has been handled.

Information Commissioner's Office - https://ico.org.uk/?utm_source=chatgpt.com

The ICO specifically requires privacy information to explain applicable individual rights and the right to complain to the supervisory authority.

10 — Security
We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no website, email service or method of electronic transmission can be guaranteed to be completely secure.

11 — Other websites
Our website may contain links to websites operated by other organisations.

We are not responsible for the privacy practices of third-party websites. If you follow a link to another website, you should review its privacy information separately.

12 — Changes to this policy
We may update this privacy policy from time to time to reflect changes to our business, website, technology, services or legal requirements.

The latest version will always be published on this page and the date at the top will show when it was last updated.

13 — Contact us
If you have any questions about this privacy policy, how we use personal information or wish to exercise one of your data protection rights, please contact:

Wislo Holdings Ltd
Bonnington Bond
2 Anderson Place
Edinburgh EH6 5NP
Scotland

 

Email: contact@wislo.co.uk

 

Telephone: +44 (0) 131 210 0102

 

Company number: SC878310