Privacy policy

1. Who is responsible

Wiso Savings is operated by WISO LTD, registered in Scotland under company number SC906947. Registered office: 50 Briarcroft Road, Glasgow, United Kingdom, G33 1RB. Email: info@wisosavings.com.

WISO LTD is the controller for personal information it processes in operating Wiso Savings. Send privacy questions and rights requests to the email above, or write to our registered office.

2. Contact enquiries and partnership interest

When you send the contact form, we collect your name, email address, enquiry topic and message. When you register partnership interest, we collect your email address. We store these submissions in Supabase, along with a submission reference, date and time, and an internal handling status. The database is hosted in the London region.

We use this information to respond to your enquiry or discuss the partnership you have asked about. Our lawful basis is our legitimate interest in responding to people who contact us, balanced against their rights. Registering interest does not subscribe you to a newsletter. The forms do not accept attachments; please do not include bills, bank details or sensitive information in your message.

Submissions are not publicly readable. Access is restricted to authorised staff and the server service that processes the forms. Supabase also processes technical request information to operate its infrastructure. Our enquiry retention policy below applies to contact submissions and partnership interest records as well as email correspondence.

3. Bills and postcodes in this preview

The postcode form checks the format in your browser. It does not send the postcode to Wiso or a comparison provider. The bill selector checks the selected file’s name, type and size locally and displays its name; it does not upload, read or analyse the bill’s contents.

These inputs are held temporarily in the page’s memory, not saved by the application to cookies or browser storage. They may remain while a dialog or page stays open and are released when the form unmounts or the page is reloaded or closed. Your browser may separately offer its own autofill features. We have no server-side copy of these inputs.

4. Website visits and enquiries

Loading a website involves sending technical information such as an IP address, requested URL, request time and browser information to the infrastructure serving it. We use Cloudflare for website infrastructure. We use its default protection settings. Cloudflare may process request and security information to deliver content and identify abusive traffic; the exact checks applied can depend on the request and its security assessment.

If you email us, we receive your email address, message, attachments and any name or other details you choose to provide. Please avoid sending full bills, bank details or other unnecessary sensitive information by email. We do not operate live customer accounts or accept switching applications through this preview.

5. Why we use information

• To deliver and protect the website: our legitimate interests in maintaining a reliable service and preventing misuse, balanced against visitors’ rights.
• To respond to enquiries and complaints: our legitimate interests in answering messages and resolving issues. Where an enquiry involves steps you request before entering a contract, the applicable basis may instead be taking those steps.
• To meet applicable legal requirements: compliance with a legal obligation, where a specific obligation requires processing.

6. Who receives information

Cloudflare processes website traffic as part of providing infrastructure services. Supabase provides the database and submission service for our contact and partnership interest forms. Hostinger provides our email service and processes messages and attachments sent to our Wiso email addresses, including info@wisosavings.com, support@wisosavings.com and partnerships@wisosavings.com, together with any subprocessors used to deliver that service. Our policy is to limit access within Wiso to people who need it to deal with enquiries, operate the website or meet legal obligations. Information may also be disclosed to professional advisers or authorities where necessary and legally justified.

This preview does not send your selected bill or entered postcode to suppliers, comparison partners or AI services. No advertising or analytics integrations are included in the application code reviewed for this policy.

We do not sell enquiry information or use it for unrelated marketing. Service providers may only be given the information needed for the relevant service, subject to applicable contractual and legal requirements.

7. Processing outside the UK

Cloudflare, Hostinger and Supabase use international infrastructure and subprocessors, so website and email information may be processed outside the UK. Their published data-processing terms provide arrangements for international transfers. Where a restricted transfer occurs, an applicable adequacy regulation or appropriate safeguards, such as approved contractual clauses with the relevant UK provisions, are required. The account-specific locations and safeguards remain subject to our pre-launch review.

You can request information about applicable safeguards by contacting us. The Supabase database region is London; this does not mean all support and infrastructure processing is restricted to the UK. See Supabase’s data-processing terms, Cloudflare’s data-processing terms and Hostinger’s data-processing terms for their published arrangements.

8. How long information is kept

Our standard retention period for enquiry emails and related correspondence is 12 months after the enquiry is resolved. If no further action is required, we count this from our last substantive correspondence about that enquiry. This allows us to answer reasonable follow-up questions and maintain a record of how the enquiry was handled.

• At the end of that period, our policy is to delete the correspondence and attachments from active records, or irreversibly anonymise information that is still useful for service improvement.
• If a complaint, dispute, suspected misuse or legal claim remains unresolved, we may retain only the relevant records for longer where necessary. We will document the reason, review the continued need at least every six months, and delete the records once that reason ends, unless another legal requirement applies.
• Records subject to a specific legal retention obligation are kept for the required period. That exception does not justify keeping unrelated enquiry information indefinitely.
• You can request earlier deletion. We will assess the request under applicable data protection law and explain any lawful reason for retaining information.

Locally entered postcodes and selected file details are not retained on our servers. The 12-month enquiry period does not describe Cloudflare security logs or provider backups: these have separate service-dependent retention and deletion cycles. Backup expiry and infrastructure log periods must be verified against our provider accounts before public launch. Deleting an active email does not necessarily remove every backup copy immediately.

9. Your data protection rights

Depending on the circumstances, UK data protection law gives you rights to access your personal information, correct inaccuracies, request deletion or restriction, object to processing based on legitimate interests, and receive or transfer certain information in a portable form. These rights have conditions and exceptions. If we rely on consent for a future activity, you can withdraw it without affecting earlier lawful processing.

Email info@wisosavings.com to make a request. We may need proportionate information to verify your identity. Requests are normally answered within one month; where a lawful extension applies, we will explain it. There is normally no fee.

You can also complain to the UK Information Commissioner’s Office via ico.org.uk/make-a-complaint. You do not have to contact us first.

10. Cookies, profiling and marketing

The application does not set analytics or advertising cookies, store visitor profiles or make automated decisions producing legal or similarly significant effects. Cloudflare’s security settings may involve browser storage, as explained in our Cookies policy. Sending an enquiry does not subscribe you to marketing.

The service is intended for adults comparing household services and is not designed to collect children’s information. Contact us if a child has sent information that should be removed.

11. Changes to this policy

We will review this notice before enabling bill uploads, live comparisons, accounts, analytics or new partners, and explain new processing at the point information is collected. The date above identifies this draft. A final notice will replace it when operational details are confirmed.