Privacy Notice

Last updated: 11 April 2026

Who we are

Data Wave Limited (company number 16061076) is a private limited company registered in England and Wales. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. When we say "Data Wave," "we," or "us" in this notice, we mean Data Wave Limited.

What this notice covers

This notice explains what personal data we collect, why we collect it, and your rights under UK data protection law (the UK General Data Protection Regulation and the Data Protection Act 2018).

What we collect

We collect very little. This website does not use analytics, tracking pixels, advertising scripts, or third-party cookies. We do not build profiles of visitors or share data with advertisers.

Specifically:

• Website visits: No analytics. No tracking. We do not know who visits this site or how they use it.
• Cookies: We set one session cookie (_wave_session) for security purposes (CSRF protection). It contains no personal data, expires when you close your browser, and is strictly necessary for the site to function. No consent is required for this cookie under PECR.
• Fonts: All fonts are self-hosted. No requests are made to Google or any other third party when you load this site.
• Booking a call: When you click "Let's build AI together," you are taken to Microsoft Outlook Bookings. Any information you provide there is processed by Microsoft under their own privacy policy. We receive your name, email, and any notes you include.

Microsoft Marketplace subscriptions

If you purchase a subscription through the Microsoft Commercial Marketplace, we receive:

• Your email address (purchaser and beneficiary)
• Your Microsoft tenant ID
• Subscription details (offer, plan, quantity)

We process this data to deliver the service you purchased. The lawful basis is performance of a contract (Article 6(1)(b) UK GDPR).

How we use your data

We use personal data only to:

• Respond to enquiries you make via the booking calendar
• Deliver services under a subscription or engagement agreement
• Meet legal and regulatory obligations

We do not sell personal data. We do not share it with third parties for marketing.

Where we store your data

Data is stored on servers in the European Economic Area. We use encryption in transit (TLS) and at rest.

How long we keep it

Booking enquiries: deleted within 12 months of the last interaction unless an engagement begins. Subscription data: retained for the duration of the subscription plus 12 months, then deleted.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability

To exercise any of these rights, email privacy@data-wave.io. We will respond within 30 days.

Complaints

If you believe we have not handled your data properly, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this notice

We may update this notice from time to time. The "last updated" date at the top of this page will change. We do not send notifications for minor changes because we do not have your email address.