Privacy Policy

How GenWright collects, uses and protects personal information

Effective Date: July 7, 2026

Last Updated: July 7, 2026

At GenWright, we take the privacy of our clients, prospective clients and website visitors seriously.


This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, who we may share it with and the rights you have in relation to your information.

1. Who We Are

1.1 Business Details

GenWright is the trading name of GENWRIGHT LTD, a company registered in England and Wales.

Registered address:

71–75 Shelton Street

Covent Garden

London

WC2H 9JQ

United Kingdom

Website: https://genwright.studio
Privacy email: privacy@genwright.studio

For the purposes of UK data protection law, GENWRIGHT LTD is the data controller when we decide why and how your personal information is processed.


When we process personal information solely on behalf of a client as part of a project, we may instead act as a data processor. We explain this further in Section 7.

2. Information We Collect

The information we collect depends on how you interact with GenWright.

2.1 Information you give us

When you contact us, enquire about a project, book a meeting, become a client or otherwise communicate with us, we may collect information such as:

  • your name;

  • email address;

  • telephone number;

  • company or organisation;

  • job title;

  • project requirements;

  • project budget;

  • meeting and correspondence details;

  • billing and payment information; and

  • any other information you choose to provide.

2.2 Information collected when you use our website

When you visit our website, certain technical information may be collected automatically. This can include your IP address, browser and device information, referring website, pages visited and information about how you interact with the website.


Some of this information may be collected through cookies, analytics tools and similar technologies.

2.3 Information we receive during client projects

To deliver our services, clients may provide us with information relating to their business, systems or customers.


Depending on the project, this could include business materials, account or system access details, technical information, customer or employee information and other data needed to complete the agreed work.


We only ask for or access information that is reasonably necessary for the work we have agreed to carry out.

3. How We Collect Information

We may collect personal information:

  • directly from you when you contact us, complete a form, book a meeting, enter into an agreement with us, make a payment or communicate with our team;

  • automatically when you interact with our website;

  • from clients where information is required for us to complete a project; and

  • from publicly available professional or business sources where permitted by law.

Where we obtain professional contact information from another source, this may include company websites, professional networking platforms or business information providers.

4. Why We Use Your Information

We only use personal information where we have a legitimate reason and a lawful basis to do so.

4.1 Responding to enquiries

We use your information to respond when you contact us, understand what you need, discuss potential projects and prepare proposals or quotations.


Depending on the circumstances, we do this because you have asked us to take steps before entering into a contract or because it is in our legitimate interests to respond to business enquiries.

4.2 Delivering our services

When you become a client, we use relevant information to manage and deliver the services we have agreed to provide.


This processing is generally necessary to perform our contract with you.

4.3 Running our business

We use information where necessary to manage client relationships, maintain business records, issue invoices, process payments, manage accounts and carry out our day-to-day business operations.


Depending on the activity, we may rely on contractual necessity, legal obligations or our legitimate interests in operating and managing our business.

4.4 Operating and improving our website

We may use technical and website usage information to maintain the security and performance of our website, understand how it is being used and identify ways to improve it.


Where required, we will ask for consent before using non-essential cookies or similar technologies.

4.5 Meeting legal obligations

We may also process information where necessary to comply with applicable laws, regulations, tax requirements or valid legal requests.

5. Marketing and Business Communications

We may occasionally contact existing or prospective business clients about GenWright services that we believe may be relevant to them.


We only do this where we have an appropriate lawful basis and where the communication is permitted under applicable law.


Where professional contact details have not been provided directly to us, they may come from publicly available business sources, professional networks or reputable business information providers.


You can ask us to stop sending you marketing communications at any time by using any unsubscribe option provided or by contacting us at privacy@genwright.studio.


If you opt out, we may retain limited information about your preference so that we can make sure we do not contact you again for the same marketing purpose.

6. Who We Share Information With

We do not sell your personal information.


We may use trusted third-party service providers to help us operate GenWright and deliver our services.

Depending on what is required, these providers may support us with:


  • website hosting and infrastructure;

  • email and communications;

  • meeting scheduling;

  • analytics;

  • accounting and financial administration;

  • payment processing;

  • project management;

  • cloud storage; and

  • other technology used to operate our business or deliver client projects.


We only share information that is reasonably necessary for the relevant service.


We may also disclose information where required by law, regulation, court order or another valid legal process, or where necessary to establish, exercise or defend legal rights.

7. Information We Process for Clients

Some GenWright projects may involve access to systems or information controlled by our clients.


In these situations, the client will generally decide why the personal information is being used and will act as the data controller. GenWright will process the information on the client's behalf as a data processor.


Where GenWright acts as a processor, we process the information according to the client's documented instructions, our contractual obligations and applicable data protection law.


Where required, these responsibilities will be set out in a separate Data Processing Agreement.

If your personal information is held within a system operated by one of our clients and you want to exercise your privacy rights, you may need to contact that client directly.

8. International Transfers

GenWright operates remotely and may use service providers that store or process information outside the United Kingdom.


Where personal information is transferred internationally and data protection law requires additional safeguards, we take appropriate steps to protect that information.


Depending on the destination and service provider, these protections may include recognised adequacy arrangements, approved contractual safeguards or another lawful transfer mechanism available under UK data protection law.


You can contact us at privacy@genwright.studio if you would like more information about safeguards relevant to your personal information.

9. How Long We Keep Your Information

We do not keep personal information for longer than we reasonably need it.


How long information is retained depends on why it was collected, the nature of our relationship with you and any legal, accounting, contractual or regulatory requirements that apply.


For example, information connected with client projects, contracts, invoices and payments may need to be kept after a project has ended to meet our legal or financial obligations or to deal with potential disputes.


Marketing information may be retained while it remains relevant or until you opt out. Where you opt out, we may retain limited information on a suppression list so that we can respect your preference in the future.


When information is no longer required, we take reasonable steps to delete it or securely dispose of it.

10. How We Protect Your Information

We use appropriate technical and organisational measures designed to protect personal information from unauthorised access, alteration, disclosure, loss or misuse.


Access to personal information is limited to people and service providers who need it for legitimate business or project purposes.


Where third-party providers process information on our behalf, we take reasonable steps to work with providers that offer appropriate data protection and security measures.


No website, electronic system or method of transmitting information can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we take reasonable steps to protect the information entrusted to us.

11. Your Privacy Rights

Depending on the circumstances and the law that applies to the processing of your information, you may have the right to:

11.1 Access your information

You can ask us for a copy of the personal information we hold about you.

11.2 Correct your information

You can ask us to correct information that is inaccurate or complete information that is incomplete.

11.3 Request deletion

In certain circumstances, you can ask us to delete your personal information.

11.4 Restrict processing

You may have the right to ask us to limit how we use your information in certain circumstances.

11.5 Object to processing

You may have the right to object to certain uses of your personal information.

11.6 Object to direct marketing

You have the right to object to the use of your personal information for direct marketing at any time.

11.7 Data portability

In certain circumstances, you may have the right to receive personal information you provided to us in a structured, commonly used and machine-readable format or ask us to transfer it to another organisation.

11.8 Withdraw consent

Where we rely on your consent to process information, you can withdraw that consent at any time. Withdrawing consent does not affect processing that took place before your consent was withdrawn.


These rights are not absolute and may depend on the circumstances and the lawful basis on which your information is processed.

12. How to Exercise Your Rights

To make a privacy request, email: privacy@genwright.studio

Please tell us what you are requesting and provide enough information for us to identify the relevant records.


We may need to ask for additional information to verify your identity before acting on a request. This helps us avoid disclosing or changing personal information without proper authorisation.


Where UK GDPR applies, we will respond within the timeframe required by law. In most cases, this means within one month of receiving a valid request. The law allows additional time in certain circumstances, including where a request is particularly complex.

13. Automated Decision-Making

We do not currently use personal information collected through our public website to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.


If this changes, we will update this Privacy Policy and provide any additional information required by law.

14. Children's Information

GenWright provides services primarily to businesses and professional users.


Our website and services are not directed at children, and we do not knowingly collect children's personal information through our public website.


If you believe a child has provided personal information to us, please contact privacy@genwright.studio.

15. Complaints

If you have concerns about how we have collected or used your personal information, please contact us first so that we have an opportunity to investigate the issue.


You can contact us at:


Email: privacy@genwright.studio


Address:
GENWRIGHT LTD
71–75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom


You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

16. Changes to This Privacy Policy

We may update this Privacy Policy when our services, systems, suppliers, business practices or legal obligations change.


When we make changes, we will update the Last updated date at the top of this page.


Where a change materially affects how we use personal information, we will take appropriate steps to bring that change to the attention of affected individuals where required.

17. Contact Us

Questions about this Privacy Policy or how GenWright handles personal information can be sent to:


GENWRIGHT LTD
Trading as GenWright


Privacy: privacy@genwright.studio
General enquiries: hello@genwright.studio
Website: genwright.studio


Registered address:
71–75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom