Privacy
Policy.

Our Commitment to Your Privacy

We Are Visionary is committed to handling personal information responsibly, securely and transparently.

This Privacy Policy applies to visitors of wearevisionary.co.uk, prospective customers, existing clients, account holders and individuals who contact us or purchase our services.

Our services include website design, WordPress development, eCommerce solutions, website hosting, website maintenance, security, technical support and related digital services.

We process personal information in accordance with applicable UK data protection legislation, including the UK GDPR, Data Protection Act 2018 and relevant electronic communications law.

Who We Are

We Are Visionary is a trading brand operated by Onlyfish Digital Media Group Limited.

For our website, enquiries, sales, billing and business administration, the company generally acts as the data controller.

Our company registration can be viewed through the official Companies House register .

Where we host, maintain or process personal information on behalf of a client, we may act as a data processor, with the client acting as controller.

Information We Collect

Identity and Contact Information

• Full name and business name.
• Email address and telephone number.
• Business and billing addresses.
• Job title or business role where provided.
• Information submitted through enquiry forms.

Project and Service Information

• Website requirements and project briefs.
• Domain names and website configuration.
• Project files and submitted content.
• Technical requirements and support requests.
• Communications and project correspondence.

Account and Billing Information

• Customer account identifiers.
• Purchased products and services.
• Invoices and transaction records.
• Subscription and renewal information.
• Payment status and billing history.

Technical and Usage Information

• IP addresses and browser information.
• Device and operating system information.
• Website activity and referral information.
• Server, diagnostic and security logs.
• Cookie preferences and consent records.

Information may be provided directly by you, collected automatically through our website or received from providers involved in delivering our services.

How We Use Your Information

We process personal information where reasonably necessary to operate our business and provide services.

• Responding to enquiries and preparing quotations.
• Delivering website design and development projects.
• Providing hosting and website maintenance.
• Managing customer accounts and support tickets.
• Processing payments and recurring subscriptions.
• Issuing invoices and payment reminders.
• Maintaining website security and preventing fraud.
• Improving website functionality and user experience.
• Meeting accounting, tax and legal obligations.
• Sending permitted service and marketing communications.

We aim to collect only the information reasonably necessary for these purposes.

Lawful Bases for Processing

The lawful basis we rely on depends on the processing activity and the circumstances involved.

Where we rely on legitimate interests, we consider whether those interests are overridden by individuals' rights and freedoms.

Our Service Providers

We use third-party technology providers to operate our website, deliver hosting, manage customers, process payments and understand website performance.

Depending on the service, these providers may act as processors, independent controllers or in another legally defined role.

Their processing is subject to applicable agreements and their own privacy documentation.

• Stripe Privacy Policy
• Google Privacy Policy
• Meta Privacy Policy
• 20i
• WHMCS

We may also use professional advisers, domain registrars, email services, developers and other suppliers where reasonably necessary.

Stripe Payments and Subscriptions

We use Stripe for secure online payment processing for website development, hosting, maintenance and related services.

Stripe may collect billing details, payment card information, transaction data and information necessary for fraud prevention.

Where Stripe-hosted Checkout is used, complete card details are processed by Stripe rather than intentionally stored on our website servers.

We receive transaction information including payment status, payment identifiers, customer references and subscription details.

Recurring subscriptions may continue in accordance with the customer's applicable service agreement until cancelled or otherwise ended under those terms.

Stripe may retain payment information according to its own legal and operational requirements.

Hosting, Maintenance and WHMCS

WAV uses 20i for hosting infrastructure and WHMCS for customer and service administration.

These systems may process information needed to manage hosting packages, subscriptions, account access, support requests, renewals and technical service delivery.

When maintaining client websites, authorised personnel or providers may need access to administration areas, hosting panels, databases, backups and server logs.

We aim to restrict access to legitimate service requirements and apply appropriate security measures.

Clients generally remain responsible for personal information collected through their own websites where they determine its processing purposes.

Cookies, Analytics and Advertising

WAV uses cookies and similar technologies to operate its website, support essential functionality, analyse usage and measure advertising performance.

Strictly Necessary Technologies

These may support security, authentication, customer sessions, checkout and portal functionality. They may be used without consent where a relevant legal exception applies.

Google Analytics

We use Google Analytics to understand website traffic, visitor activity and website performance.

Depending on its configuration, Google Analytics may process device information, online identifiers, usage events and approximate location.

Analytics technologies are subject to applicable consent and transparency requirements. Where an analytics exception is relied upon, we will apply its conditions, including objection mechanisms where required.

Meta Pixel

We use Meta Pixel to measure advertising performance, website actions and support relevant advertising and remarketing.

Meta Pixel may process online identifiers, browser information and website interaction events.

We require consent before activating non-essential advertising tracking.

Managing Cookie Preferences

Visitors should be able to accept, reject or customise non-essential cookies through website consent controls.

Where consent is required, non-essential tracking must not activate before valid consent.

Visitors should also be able to withdraw or change consent through the website's cookie preferences mechanism.

Browser settings may provide additional cookie management options.

International Data Processing

WAV does not independently sell customer data to overseas organisations or intentionally disclose it internationally for unrelated commercial purposes.

However, some providers, including Google, Meta and Stripe, operate internationally.

Depending on their systems and contractual arrangements, personal information may be accessed, processed or stored outside the United Kingdom.

Where a restricted international transfer takes place, we will seek appropriate legal mechanisms and safeguards.

These may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses or another valid mechanism.

We aim to review relevant supplier documentation and contractual safeguards.

How Long We Retain Information

We retain personal information only for as long as reasonably necessary for its purpose, taking into account contracts, legal obligations, security and legitimate business needs.

The following are proposed retention standards, subject to operational implementation and applicable exceptions.

Retention may be extended where necessary for disputes, legal claims, regulatory obligations or security investigations.

At the end of the applicable period, information will be deleted, anonymised or otherwise handled in accordance with the law.

Protecting Personal Information

We aim to apply technical and organisational safeguards appropriate to the information being processed.

• Account authentication and access controls.
• Encrypted website connections.
• Security updates and vulnerability management.
• Restricted access to client systems.
• Backup and recovery arrangements.
• Security monitoring and logging.
• Confidentiality obligations for authorised personnel.
• Appropriate supplier agreements and safeguards.

No internet-based service can guarantee absolute security. We seek to minimise foreseeable risks and respond appropriately to security incidents.

Where a personal data breach occurs, we will assess and comply with applicable notification requirements.

Processing Data on Behalf of Clients

When WAV hosts, develops, maintains or supports a client's website, we may process personal information relating to their customers, staff or visitors.

WAV may act as data processor while the client acts as controller.

Where legally required, we will enter into an appropriate data processing agreement.

Such agreements should address:

• Documented processing instructions.
• Confidentiality obligations.
• Technical and organisational security.
• Approved subprocessors.
• International transfer safeguards.
• Assistance with data subject requests.
• Personal data breach assistance.
• Deletion or return of data when services end.

Clients remain responsible for ensuring their own websites have appropriate privacy notices, lawful bases and consent mechanisms.

Marketing and Communications

We may contact customers regarding projects, invoices, support, service renewals, security and account administration.

We may also send promotional communications where permitted by law.

Marketing emails will include an appropriate opt-out method where required.

You can request that we stop sending marketing communications at any time.

Opting out of marketing will not prevent necessary billing, contractual or security messages.

Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion in qualifying circumstances.
• Request restriction of certain processing.
• Object to certain processing activities.
• Request portability of eligible information.
• Withdraw consent where processing relies on consent.
• Exercise applicable rights relating to qualifying automated decisions.

These rights are subject to applicable conditions and exceptions.

To exercise a right, contact hello@wearevisionary.co.uk .

We may request reasonable identity verification and aim to respond within the period required by law, normally one month, subject to permitted extensions.

Complaints

You may complain to the Information Commissioner's Office if you are concerned about how your information is handled.

Information Commissioner's Office

Children and External Websites

Children

WAV's services are primarily intended for adults and businesses. We do not intentionally seek personal information directly from children through our sales process.

Third-Party Links

Our website may link to external websites, social media platforms, payment services and other resources.

Independent third parties maintain their own privacy policies. We encourage visitors to review them.

Changes to This Privacy Policy

We may update this policy to reflect changes in our business, services, providers, legal requirements or data handling practices.

The latest version will be available on this website with an updated date.

Where required, we will provide additional notice of significant changes.