Privacy Policy

How GenWright collects, uses and protects personal information

Effective Date: July 7, 2026

Last Updated: July 7, 2026

GenWright aims to process personal information lawfully, fairly and transparently and only for legitimate purposes.

The data-protection materials you supplied emphasise lawfulness, purpose limitation, data minimisation, accuracy, appropriate retention and security.

1. Who We Are

1.1 Business Details

Trading name: GenWright
Legal entity: GENWRIGHT LTD
Registered address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Website: https://genwright.studio
Privacy email: privacy@genwright.studio

1.2 Data Controller

GENWRIGHT LTD is the data controller where we determine the purposes and means of processing personal information for our own business activities, including website administration, enquiries, prospective clients, client relationships, invoicing and business operations.

2. Personal Information We Collect

2.1 Information You Provide

We may collect your name, email address, telephone number, company, job title, project requirements, budget, correspondence, meeting details, billing information and other information you choose to provide.

2.2 Technical Information

When you visit the website, technical information may be collected such as IP address, browser type, device information, referring website, pages viewed and website interactions.

2.3 Client Project Information

Where necessary to provide services, we may receive company materials, credentials, technical information, customer or employee data, system requirements or other information connected to a client project.

3. How We Collect Information

3.1 Direct Collection

Information may be collected when you complete a form, email us, schedule a meeting, enter into a project, make a payment or otherwise communicate with GenWright.

3.2 Public and Business Sources

Where permitted by law, GenWright may receive professional contact information from public business websites, professional networks or reputable business-data sources.

3.3 Automated Collection

Technical information may be collected automatically through website infrastructure, cookies and analytics services.

4. How and Why We Use Information

4.1 Enquiries and Projects

We process information to respond to enquiries, assess potential projects, prepare proposals and provide contracted services.

4.2 Business Administration

We may process information for invoicing, accounting, record keeping, relationship management and other legitimate business purposes.

4.3 Website Operation

Technical information may be used to operate, secure and improve the GenWright website.

4.4 Legal Bases

Depending on the circumstances, processing may rely on contract, steps taken before entering into a contract, legitimate interests, legal obligations or consent.

These are among the lawful bases identified in the uploaded data-protection policy.

5. Marketing and Business Outreach

5.1 Business Outreach

GenWright may contact businesses where we reasonably believe our services may be relevant and where such communication is permitted by applicable law.

5.2 Sources of Contact Information

Professional contact information may, where lawful, come from business websites, professional networks or reputable business-data providers.

5.3 Opting Out

You may ask us to stop sending marketing communications at any time.

Where appropriate, limited information may be retained on a suppression list so that your preference can continue to be respected.

6. Sharing Personal Information

6.1 Service Providers

Information may be shared with trusted providers of hosting, email, scheduling, analytics, accounting, payment processing, project management, cloud storage and technical infrastructure where reasonably necessary.

6.2 Legal Requirements

Information may also be disclosed where required by law, regulation or valid legal process.

6.3 Sale of Information

GenWright does not sell personal information.

7. Client Systems and Processor Data

7.1 Controller and Processor Roles

Where a client determines why and how information stored within a custom system is used and GenWright processes that information only to provide the agreed service, the client will generally act as controller and GenWright as processor.

7.2 Client Instructions

GenWright will process such information in accordance with the client's documented instructions and applicable contractual requirements.

7.3 Data Processing Agreement

Where appropriate, processing will be governed by a separate Data Processing Agreement.

8. International Transfers

8.1 International Providers

Because GenWright works remotely and may use international service providers, information may be stored or processed in other countries.

8.2 Safeguards

Where applicable law requires safeguards for international transfers, GenWright will use an appropriate lawful transfer mechanism where reasonably required.

The privacy template supplied in the package was specifically written on the assumption that no international transfers occur, so that wording should not be copied unless that is factually true for GenWright.

9. Data Retention

9.1 General Principle

Personal information will only be kept for as long as reasonably necessary for the purpose for which it was collected.

The uploaded retention policy follows the same principle and requires records that are no longer needed to be deleted according to an appropriate retention schedule.

9.2 Business Records

Client, contractual, accounting and payment records may be retained for longer where needed for legal, financial or dispute-resolution purposes.

9.3 Marketing Information

Marketing information may be retained until you opt out or it is no longer reasonably required.

10. Security

10.1 Security Measures

GenWright uses reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, alteration or disclosure.

10.2 Access

Access to personal information is limited to people or service providers who reasonably require it for business or project purposes.

10.3 Limitations

No electronic system can be guaranteed to be completely secure.

11. Your Privacy Rights

Depending on applicable law, you may have the right to:

11.1 Access

Request a copy of personal information held about you.

11.2 Rectification

Request correction of inaccurate or incomplete information.

11.3 Erasure

Request deletion in certain circumstances.

11.4 Restriction

Request restriction of certain processing.

11.5 Objection

Object to certain processing, including direct marketing.

11.6 Data Portability

Request certain personal information in a portable format where applicable.

11.7 Withdrawal of Consent

Withdraw consent where consent is the legal basis for processing.

The supplied privacy and DSAR templates recognise these rights.

12. Privacy Requests

12.1 Making a Request

Requests should be sent to privacy@genwright.studio

12.2 Identity Verification

We may request sufficient information to confirm your identity before providing or changing personal information.

12.3 Response Time

Where UK GDPR applies, legitimate requests will normally be dealt with within the applicable statutory timeframe. The supplied privacy template states that requests are usually answered within one month, subject to permitted extensions for complexity.

13. Automated Decision-Making

GenWright does not currently use personal information collected through its public website to make solely automated decisions producing legal or similarly significant effects.

If that changes, this policy will be updated where required.

14. Children's Information

GenWright's website and services are intended primarily for businesses and professional users.

We do not knowingly collect children's personal information through the public website.

15. Complaints

If you have a concern about how GENWRIGHT LTD handles your personal information, we encourage you to contact us first so we can investigate and try to resolve the issue.

You can contact us at privacy@genwright.studio or write to GENWRIGHT LTD, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

If you remain dissatisfied, you may have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

16. Changes to This Policy

This policy may be updated where our services, systems, providers or legal obligations change.

The latest version will show the updated date at the top of this page.

17. Contact

GenWright Studio
Email: hello@genwright.studio
Website: https://genwright.studio