Privacy,
made clear.

Who is responsible

UnflakeOps is a trading name of Wadud Ltd, the controller responsible for personal information used for enquiries, client administration and operating this website.

Wadud Ltd is registered in England and Wales under company number 11468940. Its registered office is 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE. For privacy questions or requests, use the enquiry form and state that your message concerns data protection.

Information we collect

The website asks for your name, work email, organisation and the recurring report or process you want to discuss. When you submit the form, those details are recorded in Zoho CRM so that we can respond and manage the enquiry.

During an agreed engagement, we may also handle contact details, project records and the limited system or workflow data needed for the work.

Why we use it

• To answer enquiries and arrange a diagnostic conversation.
• To scope, contract, deliver and support agreed services.
• To secure our systems, maintain business records and meet legal obligations.
• To improve our services using appropriately limited information.

Depending on the context, our legal basis may be taking steps before a contract, performing a contract, complying with law or pursuing legitimate interests in responding to business enquiries and operating our services.

Client and charity data

Access to systems and data is agreed before work begins and limited to what is necessary for the scope. If UnflakeOps processes personal data on a client’s behalf, the parties will agree appropriate processing terms, security responsibilities, retention and deletion arrangements before that processing starts.

Providers, transfers and security

We use Vercel to host and protect this website and Zoho CRM to record and manage website enquiries. These providers may process limited technical or enquiry information for us under their terms and security arrangements. During a client engagement, the agreed Microsoft services and any other necessary provider will be recorded in the project documents.

Where a provider processes information outside the UK, we rely on an appropriate transfer safeguard where required. We do not sell personal information or use it for third-party advertising.

Cookies and technical data

The current reporting-offer page does not use advertising or analytics cookies. Hosting and security services may process technical request data such as an IP address, device information, timestamps and requested pages to deliver and protect the site.

If we introduce non-essential analytics or similar technologies, we will update this policy and request consent where required.

How long we keep information

• Enquiries that do not become client work are normally deleted or anonymised after 12 months.
• Temporary project working data is normally deleted within 90 days after completion, unless the project documents require a different period.
• Contracts, invoices and accounting records are normally kept for six years to meet legal, tax and record-keeping obligations.
• Client personal data is retained and deleted according to the applicable statement of work and data-processing agreement.

We may keep information for longer where required by law, to resolve a dispute or to establish, exercise or defend legal claims. We review these periods and remove information sooner when it is no longer needed.

Your rights

Under UK data-protection law, you may have rights to access, correct, erase or restrict your personal information, object to certain uses and receive portable data. Use the website enquiry form and state that your message concerns data protection. You may also complain to the UK Information Commissioner’s Office.

These rights can depend on the circumstances and may be subject to lawful exceptions.