GDPR Statement

WINCHR

Data Controller: WINC Ltd (trading as WINC HR)
Company Number: 09209886
Registered Office: 167–169 Great Portland Street, 5th Floor, London, England, W1W 5PF
Data Protection Officer: Karl Wood – karl@winchr.uk
ICO Registration Number: CSN1777269

At WINC HR, we take data protection seriously because trust sits at the heart of every relationship we build. This statement explains the principles we follow when handling personal information.

How We Handle Your Data

We work to simple, honest principles. When we collect or use your data, we make sure that it is:

  • used lawfully and transparently

  • collected for clear reasons and never for anything unexpected

  • limited to what we genuinely need

  • accurate and kept up to date

  • stored securely

  • kept only for as long as it is useful or required


In some of our work, for example, leadership assessments or coaching, we may handle more sensitive information. When we do, we use strict confidentiality and security controls and process it only where it is genuinely necessary.

We use well-known, reputable service providers to run our businesses, including Stripe, Xero, Google Workspace, CRM platforms, and website hosting providers. They act as data processors and must comply with stringent data protection standards.

International Transfers

Most of our data processing happens in the UK. If one of our providers uses servers outside the UK or the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses.

Your Rights

Under UK GDPR, you can:

  • ask what personal data we hold about you, and request corrections

  • ask us to delete your data

  • limit how it is used

  • object to certain types of processing

  • request your data in a portable format

  • withdraw consent where consent is used


You can contact us at any time via https://winchr.uk/contact/
If you are unhappy with how we manage your data, you can also contact the ICO (www.ico.org.uk).

Access to Policies

If you would like to see our full GDPR policy, please ask. We are happy to share it.