WyldBrew Ltd

Privacy Notice

This notice explains how WyldBrew Ltd uses personal information for its own business purposes. It also explains our separate role when we collect and process information on behalf of clients. It applies to people who contact us, visit our website, engage with our services, attend events we control, or apply to work with us. Staff may receive additional employment-specific privacy information.

1. Who we are and how to contact us

WyldBrew Ltd is a UK marketing and business services company. When we determine why and how personal information is used for our own operations, we act as a data controller.

Email: hello@wyldbrew.co.uk

Post: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

2. Our role when working for clients

For client-led marketing campaigns, community activations, registration programmes and customer-support activities, we generally collect and process personal information on the client’s behalf, following the client’s documented instructions. In those circumstances, the client determines the purposes of processing and acts as the data controller, while WyldBrew acts as its processor. The relevant client’s privacy notice explains its purposes, lawful bases, retention periods and other controller responsibilities.

For example, during GCash UK activations we may collect names, email addresses, mobile telephone numbers and records of product enquiries or issues through Google Forms. Authorised GCash personnel, including personnel in the Philippines, may access that information for campaign administration and customer support. WyldBrew does not independently use this client-controlled information for its own marketing.

If you have a question or wish to exercise your rights concerning information collected for a client, please contact the relevant client as controller. If you contact us, we will assist or direct the request as appropriate.

3. Information we process for our own purposes

Contact and business information: names, email addresses, telephone numbers, postal addresses, job titles and organisation details.
Communications and business records: enquiries, correspondence, meeting notes, project decisions, invoices, payments and supplier or client relationship information.
Marketing information: contact details, communications preferences and interactions with our marketing, where applicable.
Recruitment information: applications, CVs, employment and education history, references, right-to-work information, identity documents and other information necessary for recruitment.
Employment administration: personnel, attendance, leave, pay, tax and other HR records.
Website and event information: information submitted through our website, relevant technical usage information, and, for events that WyldBrew itself controls, attendee details and photographs or video where applicable.

We only collect information relevant to the activity concerned. Additional information may be provided when we collect it.

4. Why we use information and our lawful bases

Responding to enquiries, maintaining client and supplier relationships and managing business operations: our legitimate interests in operating and developing our business; contract where necessary for a contract with the individual.
Recruiting staff: legitimate interests in assessing applicants, steps requested before entering an employment contract, and legal obligations such as right-to-work checks.
Administering employment, HR and payroll: employment contract and legal obligations, as applicable.
Accounting, tax and statutory record keeping: legal obligations and, where relevant, legitimate interests.
Handling complaints, investigating issues and protecting legal rights: legitimate interests and legal obligations where applicable.
Sending marketing communications: consent where required; legitimate interests where the law permits, subject to applicable electronic marketing rules.

Where we rely on legitimate interests, we consider the necessity of the processing and its effect on individuals’ rights and expectations.

5. Marketing communications

We may contact business representatives about relevant services where permitted by law. We seek consent for promotional emails or messages to individuals where required by the Privacy and Electronic Communications Regulations (PECR), unless a valid exception applies. Registering for an event does not, by itself, constitute agreement to receive marketing. You can withdraw consent or object to direct marketing at any time by contacting us or using the unsubscribe option in a message. We may keep a limited suppression record to respect your choice.

6. Where information comes from

We obtain personal information directly from you, through business correspondence and website or event forms, from publicly available professional sources, and where relevant from clients, suppliers, recruitment sources and event partners. Information we handle on a client’s behalf is governed by that client’s instructions.

7. How long we keep information

We retain information only as long as needed for the relevant purpose and applicable legal requirements. For information that WyldBrew controls, our retention approach is:

Event registrations for events we control: generally up to 12 months after the event, unless a longer period is justified.
Client and supplier business records: generally up to six years after the relationship ends, where needed for legal, accounting or contractual purposes.
Financial and accounting records: generally six years, or longer where required by applicable law.
Unsuccessful job applications: generally up to six months after the recruitment process, unless a longer period is justified and communicated.
Marketing records: while a valid permission or lawful basis applies; limited suppression records may be retained to honour opt-outs.
Employee and payroll records: for the periods required or justified under employment, tax and other applicable laws.
Complaints and enquiries: for as long as necessary to resolve the matter and, where appropriate, establish, exercise or defend legal claims.

When information is no longer needed, we delete, anonymise or securely dispose of it as appropriate. For client-controlled information, we follow the client’s applicable retention and deletion instructions.

8. Who we share information with

Where necessary for our own business operations, we disclose relevant information to service providers supporting HR, accounting, payroll, website operation, communications, and event administration. These include BrightHR and Crunch. Depending on the service and its terms, a provider may act as our processor or as an independent controller. We may also disclose information to professional advisers, public authorities or other parties where necessary and lawful.

We use services including Google Workspace and Wix and may use event registration platforms such as Ticket Tailor. The precise data handled depends on the activity. We may publish photographs or video from activities on our website or social channels where we have an appropriate lawful basis and have provided relevant information.

For client-led activities, we make information available to the client and to authorised service providers only as directed by that client or otherwise permitted by law.

9. International access and transfers

For client-led activities, authorised personnel of an overseas client may access information we collect on that client’s behalf. In particular, information collected during GCash UK activations may be accessible to authorised GCash personnel in the Philippines. The client controls the purposes of that processing and the applicable privacy arrangements.

Some technology providers may also process or allow access to personal information from outside the UK. Where a transfer is subject to UK data protection restrictions, the party responsible for that transfer must ensure that an appropriate legal mechanism and safeguards apply. Information about particular client-controlled transfers can be obtained from the relevant client.

10. Website cookies

Our website is hosted on Wix and uses cookies and similar technologies to support website functionality and security. Additional cookies or tracking technologies may be used depending on the services and integrations enabled on the website. We are reviewing our website’s cookie configuration to identify any non-essential cookies and ensure that appropriate information and consent choices are provided where required by law. For questions about cookies, please contact hello@wyldbrew.co.uk.

11. Your data protection rights

Depending on the circumstances and applicable exemptions, you may have the right to access your personal information, correct inaccurate information, request erasure or restriction, object to processing, request portability and withdraw consent where processing relies on consent. You also have the right to object to direct marketing at any time.

For information WyldBrew controls, contact hello@wyldbrew.co.uk. We respond without undue delay and normally within one month, subject to permitted extensions. For information controlled by a client, contact the client directly; we will provide appropriate assistance where required.

12. Complaints

If you have concerns about our use of your information, contact hello@wyldbrew.co.uk or write to 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

You can also complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint or by calling 0303 123 1113.