Privacy Policy
How WeForm Online collects, uses and protects your personal data, in line with the UK GDPR, the EU GDPR and the Data Protection Act 2018.
Last updated: 1 June 2026
1. Who we are
WeForm Online (“WeForm”, “we”, “us”) provides remote company formation, online banking introductions, licensing and payment solutions. We are the data controller for the personal data described in this policy. For any privacy request, contact us at [email protected].
2. What data we collect
- Contact details you give us - name, email, phone, the message you send and the jurisdiction you’re interested in.
- Marketing attribution - the campaign parameters (UTM tags), landing page and referrer associated with your visit, so we understand which campaigns help people find us.
- Technical & usage data - approximate location (country/city derived from your IP), device, browser and pages viewed. Your IP address is stored only as a one-way hash.
- Consent records - what cookie choices you made and when, as evidence of compliance.
3. How we use it and our lawful bases
- To respond to your enquiry and provide our services - lawful basis: performance of a contract / taking steps at your request (Art. 6(1)(b)).
- To understand and improve our marketing (campaign attribution, aggregate analytics) - lawful basis: your consent for non-essential cookies, and our legitimate interests for data you submit directly (Art. 6(1)(a)/(f)).
- To keep the site secure and working - lawful basis: legitimate interests (Art. 6(1)(f)).
- To meet legal and anti-money-laundering obligations where we provide regulated services - lawful basis: legal obligation (Art. 6(1)(c)).
4. Cookies and tracking
We set a strictly-necessary first-party identifier so the site works, and we only run analytics and marketing technologies after you opt in via our cookie banner. You can change your choice at any time using “Cookie settings”. See our Cookie Policy for details.
5. How long we keep it
- Anonymous behavioural analytics - automatically deleted after 30 days.
- Consent records - kept for 12 months as proof of compliance.
- Enquiry / lead and client data - kept for as long as needed to provide our services and to meet legal retention obligations, then deleted or anonymised.
6. Sharing
We share data only with service providers who help us run WeForm (e.g. hosting, communications) under appropriate contracts, with banking and licensing partners when you ask us to introduce you, and where required by law. We never sell your personal data. Where data leaves the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses.
7. Your rights
You have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any right, email [email protected]. You may also complain to your supervisory authority - in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, your national Data Protection Authority.
8. Changes
We may update this policy. When we make material changes we will update the date above and, where required, ask you to review your cookie choices again.