This Privacy Policy explains how WorkLyfe Ltd processes your personal data.
1. Data we collect
We may collect:
● Identity & Contact Data: name, email address, phone number (via waitlist or supplier forms)
● Supplier Business Data: company name, service type, website, social links, descriptions
● Technical Data: IP address, browser type, device type, approximate location
● Usage Data: website navigation, clicks, engagement
● Cookie Data: through essential and optional cookies
2. How we use your data
We use your data to:
● Contact you with platform updates, launch information, or supplier onboarding steps
● Assess supplier suitability
● Manage and grow the WorkLyfe waitlist
● Improve website performance and user experience
● Comply with legal obligations
3. Legal bases for processing
Under UK GDPR, we rely on:
● Consent: for marketing emails and cookies
● Legitimate Interest: for platform analytics, site improvement, and supplier evaluation
● Legal Obligation: where required by law/regulations
If you submit your email address through the Toolkit Stay in Touch form, WorkLyfe Ltd uses it with your consent to send occasional email updates about new Resources, useful discoveries and major Toolkit updates. This is an occasional updates list, not a regular newsletter. Submitting the form does not create an account, membership or personalised service. You can withdraw your consent and ask us to remove your email from the active list at any time by replying to an update email or emailing hello@worklyfe.co.uk. We will stop sending updates and action the removal request promptly. We keep your address while you remain subscribed and may retain a minimal suppression record where needed to ensure that we respect your request. For privacy questions or to exercise your rights, email hello@worklyfe.co.uk.
4. Data sharing
We do not sell your data.
We may share data with:
● Website hosting and technical providers
● Email and CRM service providers
● Analytics tools (GDPR-compliant only) All providers follow GDPR contractual safeguards.
5. International transfers
If data is transferred outside the UK/EU, it is protected by:
● UK International Data Transfer Agreements (IDTA)
● Standard Contractual Clauses (SCCs)
6. Data retention
We retain:
● Waitlist data: until you unsubscribe.
● Supplier interest forms: retained until you request removal, or until they are no longer required.
● Cookie and analytics data: according to cookie type and browser settings. Data may be retained longer if required for legal reasons.
7. Your data rights
You have the right to:
● Access your data
● Correct inaccurate data
● Request deletion
● Withdraw consent
● Restrict processing
● Object to processing
● Data portability
● Complain to the ICO (Information Commissioner’s Office)
8. Contact
For privacy queries, email: hello@worklyfe.co.uk
If you choose to send feedback after a Toolkit search, WorkLyfe Ltd uses the search phrase, a privacy-normalised version of it, any Life Area or Need filter selected, the result status, a technical reason code where available, your feedback and the submission time to understand search-language, catalogue and routing gaps and improve weak-match behaviour. Sending feedback is optional. You can use the Toolkit without sending it.
Please do not include names, contact details or sensitive personal information. We do not ask for your identity, email address or account details through this form. We use this information only for Toolkit search and catalogue improvement; we do not use it for marketing, to contact you, to create a profile, to make personalised recommendations or to make decisions about you.
Our lawful basis is our legitimate interests in improving the Toolkit. We retain raw search-feedback records for no more than 90 days, then delete them or irreversibly anonymise them. Access to raw feedback is limited to named Product & Research reviewers. Separate security logs may contain limited technical data, are not used for search research, and are kept under a separate short retention period.
You can ask us about your personal information, request applicable data-protection rights, or object to this processing by emailing hello@worklyfe.co.uk. You can also complain to the Information Commissioner’s Office.
WorkLyfe may use an organisation’s publicly available business contact route to send a one-to-one email about an organisation or product that WorkLyfe has already selected independently for free inclusion in its Toolkit. The email may introduce WorkLyfe, ask the organisation to confirm or correct objective profile facts, invite the organisation to give optional written permission for WorkLyfe to display its official logo on the relevant free Toolkit Resource, and include a link to information about optional paid supplier-visibility services. There is no charge for Toolkit inclusion or for displaying a logo where permission is given. A reply, correction, logo permission, enquiry, purchase or refusal is optional and does not affect organic inclusion, profile wording, placement, ordering, search visibility, WorkLyfe Picks or the inclusion of competing organisations. WorkLyfe assesses factual corrections independently.
We may record the organisation and relevant Toolkit Resource; the business contact route and its public source and date checked; the message sent and its date; objective corrections and any official source supplied; whether logo permission was granted, refused or withdrawn and its scope; any logo file or brand-contact details supplied; any supplier-visibility enquiry or expression of commercial interest and the response or follow-up status; and any objection, STOP request, complaint, delivery failure or other relevant workflow status. Please do not send information about customers, children, families, individual cases or safeguarding matters. We will not request it. If such information is sent to us, we will restrict access and delete it when it is no longer needed to handle the message safely.
Access is limited to authorised WorkLyfe personnel who need the information for these purposes: Supplier Partnerships, and, where needed, Legal & Risk or Founder/HQ. Our contracted email and supplier-record providers may process the information on WorkLyfe’s instructions to deliver and manage correspondence and maintain the supplier records. We do not make supplier replies, logo permissions or commercial-interest records public.
Where a message or reply contains personal data about an identifiable business contact, WorkLyfe uses it to administer the factual check, assess and record any correction, manage any logo permission requested by the organisation, respond to an enquiry the organisation makes about optional supplier-visibility services, and manage objections, complaints, delivery failures and suppression. WorkLyfe relies on its legitimate interests under Article 6(1)(f) UK GDPR for this limited business-contact processing only where a documented legitimate interests assessment has confirmed that the processing is necessary and that the individual’s rights and interests do not override those interests. The assessment and this notice do not permit WorkLyfe to target a named individual with the standard outreach email. The standard email is for an appropriate, impersonal corporate business contact route. If WorkLyfe proposes to use an individual’s contact details, or the recipient’s legal or subscriber status or contact route is unclear, the standard process stops until the required route-specific legal, privacy and channel assessment is completed.
We obtain organisation-level contact-route information from the organisation’s publicly available website or other official public business source. If we use personal data obtained indirectly about a named business contact, we will identify the source and provide the information required by Article 14 UK GDPR no later than our first communication with that person. If an individual provides personal data directly in a reply, we provide the relevant privacy information at that time, including by directing them to this notice. We provide the categories of data, purposes, lawful basis, recipients, retention, rights and contact information in this notice. An individual may object to processing based on legitimate interests and may object to direct marketing at any time, without giving a reason, by replying STOP or contacting hello@worklyfe.co.uk. We will stop direct marketing to the relevant person or organisation as applicable. An individual may also complain to the Information Commissioner’s Office.
We retain supplier contact-route, source, message, correction, logo-permission, supplied-logo, brand-contact, enquiry, commercial-interest, complaint, delivery and workflow records for 12 months after the last message or reply, then delete them. If a logo is still displayed when that period ends, we retain only the minimum permission evidence needed to document the current permission while the logo is displayed, and delete that evidence 12 months after the display ends. We remove a logo when permission is withdrawn or ends. We retain only the minimum suppression record needed to honour an objection or STOP request and prevent re-contact, for as long as necessary for that purpose.
