Privacy Policy
Version 1.0 | Effective: March 2026 | Last Reviewed: March 2026
This Privacy Policy explains how WKD Systems Ltd collects, uses and protects your personal data.
Company name: WKD Systems Ltd
Company number: 03521617
Registered office: Ansdell, Ackenthwaite, Milnthorpe, Cumbria, LA7 7DL
Trading as: Paul Wakefield / WKD Systems
Website: paulwakefield.me
Contact email: [email protected]
We are the data controller for personal information collected through this website and associated platforms. For questions about this policy, contact us at the address above.
This policy applies when you:
Visit our website at paulwakefield.me
Complete the Business Pain Relief Assessment at paulwakefield.scoreapp.com
Subscribe to the BOSS newsletter via Beehiiv
Contact us by email, phone, WhatsApp or social media
Engage us for consultancy, systems or implementation services
Are listed in the WKD Systems Business Owner Directory
It does not apply to third-party websites linked from our site.
We comply with:
UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018
Privacy and Electronic Communications Regulations 2003 (PECR)
Where we process data relating to individuals in the European Economic Area, we also comply with the EU GDPR where applicable under Article 3.
Name, job title or role
Business name and location or address area
Email address and telephone number
Assessment responses (via the Business Pain Relief Assessment)
Any other information shared during enquiries, calls or correspondence
IP address and approximate location
Browser type, version and operating system
Pages visited, time on site and referring URLs
Cookie and tracking data (see Section 11)
ScoreApp — assessment responses and contact details
Beehiiv — newsletter subscription and engagement data
GoHighLevel — CRM contact records and pipeline data
LinkedIn — where you contact or connect with us via that platform
We do not intentionally collect special category personal data. If you voluntarily share any such information during a consultation, we will treat it with heightened care and process it only on the basis of your explicit consent, which may be withdrawn at any time.
To respond to enquiries and communicate about our services
To deliver the Business Pain Relief Assessment and provide personalised results
To send the BOSS newsletter and related content (with your consent)
To manage client relationships and deliver consultancy and implementation services
To send follow-up communications relevant to your assessment or enquiry
To list your business in the WKD Systems Business Owner Directory (on your request)
To comply with legal and regulatory obligations
To improve our website and services based on usage patterns
To detect and prevent fraud or misuse of our services
Where processing is necessary to perform a contract with you, or to take steps prior to entering one at your request — for example, to deliver a paid audit or implementation engagement.
Where processing is in our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes:
Following up on assessment completions to offer a review call
Sending relevant content and service information to existing contacts
Maintaining CRM records and managing our sales pipeline
Improving our website and service quality based on usage data
You have the right to object to processing on this basis. See Section 9.
Where you have given explicit consent — specifically for the BOSS newsletter subscription and for non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Where processing is necessary to comply with a legal obligation, such as responding to a court order, regulatory request or statutory duty.
We retain personal data only for as long as necessary for the purpose it was collected, or as required by law.
Assessment data (ScoreApp): 24 months from completion
CRM contact records (GoHighLevel): 3 years from last meaningful interaction
Client engagement records: 6 years from end of engagement (Limitation Act 1980)
Newsletter subscribers (Beehiiv): Until unsubscription or withdrawal of consent
Website analytics data: 13 months
Financial and contractual records: 6 years minimum (HMRC requirement)
After the relevant retention period, data is securely deleted or anonymised. You may request earlier deletion subject to our legal obligations — see Section 9.
We do not sell your personal data. We share it only with the following third-party processors, strictly for the purposes described in this policy:
GoHighLevel Inc — CRM, pipeline management, email and SMS delivery. US-based (see Section 10).
ScoreApp — Assessment delivery and results processing.
Beehiiv Inc — Newsletter delivery and subscriber management. US-based (see Section 10).
All processors are bound by data processing agreements and are required to protect your data in accordance with applicable law. We do not share your data with any third party for their own marketing purposes.
We may also disclose personal data where required by law, court order, or to protect the rights, property or safety of WKD Systems Ltd, our clients or others.
You have the following rights in relation to your personal data:
Right of access — to request a copy of the personal data we hold about you.
Right to rectification — to ask us to correct inaccurate or incomplete data.
Right to erasure ('right to be forgotten') — to request deletion of your data where there is no compelling reason to continue processing it.
Right to restriction — to ask us to limit how we use your data in certain circumstances.
Right to data portability — to receive your data in a structured, machine-readable format.
Right to object — to object to processing based on legitimate interests or direct marketing. Where you object to direct marketing, we will always comply.
Rights relating to automated decision-making — to request human review of any automated decision that significantly affects you.
To exercise any right, contact us at [email protected]. We will respond within one calendar month. There is no charge. We may verify your identity before acting.
If you are unhappy with how we have handled your data, you may complain to the Information Commissioner's Office:
Website: ico.org.uk
Telephone: 0303 123 1113
Post: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would ask you to contact us in the first instance before raising a complaint with the ICO.
Some of our third-party processors are based outside the UK, including in the United States (GoHighLevel and Beehiiv). Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including:
The UK-US Data Bridge where the recipient organisation is certified
Standard Contractual Clauses approved under the International Data Transfer Agreement (IDTA) framework
Copies of applicable safeguards are available on request from [email protected].
Our website uses cookies — small text files stored on your device — to improve your experience and help us understand how the site is used.
Strictly necessary: Required for the site to function. No consent required.
Analytics: Used to understand how visitors use the site. Consent required.
Marketing: Used to measure the effectiveness of any advertising. Consent required.
A cookie consent notice will appear on your first visit. You can accept or decline non-essential cookies at that point, and update your preferences at any time through your browser settings. Blocking certain cookies may affect site functionality.
We take appropriate technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure. These include restricting access to authorised personnel, using reputable GDPR-compliant platforms, and regularly reviewing our data practices.
No internet transmission is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee the absolute security of data transmitted to or from our website.
Our services are directed solely at business owners and professionals. We do not knowingly collect data from individuals under the age of 18. If you believe we have inadvertently done so, please contact us immediately and we will delete it.
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their own policies before sharing any personal data.
We may update this policy periodically to reflect changes in our practices or applicable law. The 'Last Reviewed' date at the top will be updated accordingly. For material changes, we will notify affected individuals directly where we hold contact details.
Paul Wakefield
WKD Systems Ltd
Ansdell, Ackenthwaite, Milnthorpe, Cumbria, LA7 7DL
Email: [email protected]
Website: paulwakefield.me