Home / Privacy Policy
Privacy Policy
1. Who we are
This policy explains how Wardour ("we") uses personal data when you visit our website, buy from us, join our mailing list or contact us. We are the controller of the personal data described here, except where stated.
| Item | Details |
|---|---|
| Seller (the legal person selling) | Future Healthcare Group Limited, trading as Wardour Clinical Standards |
| Legal status | a private limited company registered in England and Wales, company number 15335584 |
| Address for legal notices | The Cottage, Micklands Hill Farm, Stow Road, Bledington, Chipping Norton, OX7 6XH, United Kingdom |
| Support email | help@wardourclinical.co.uk |
| Website | wardourclinical.co.uk |
| Checkout platform | Payhip |
| Effective date | 15 October 2026 |
2. The data we collect
| Category | Examples | Where from |
|---|---|---|
| Order data | Name, email, organisation name, billing country, products bought, order number, licence and download records | Our checkout platform, when you buy |
| Account and subscription data | Subscription status, renewal dates, cancellation | Our checkout platform |
| Communications | Emails you send to support, and our replies | You |
| Marketing data | Email address, name, which emails you open or click, preferences | You, when you sign up; our email service |
| Contact form data | Name, email, organisation and message, if you use our contact form | You |
| Technical data | IP address, device and browser type, pages requested and date/time, in our website host's security and server logs | Your browser, via our website host |
| Advertising measurement data (only if you click "Accept" in our cookie banner) | The Google advert you clicked (click ID), whether you clicked a Buy button or completed an order, the order value, IP address and device type | Your browser, via Google Ads cookies and tags |
We do not need, and ask you not to send us, patient, service-user or staff records or other health data. If you send such data by mistake we will delete it.
Payment card details are collected and processed by our checkout platform; we never see your full card number.
3. How we use it and our lawful bases (UK GDPR Article 6)
| Purpose | Lawful basis |
|---|---|
| Deliver your download, provide updates you are entitled to, manage your licence and subscription | Contract |
| Answer support emails | Contract; legitimate interests (helping customers) |
| Keep tax and accounting records | Legal obligation |
| Send service emails (order confirmation, update notices, renewal reminders) | Contract; legal obligation |
| Send marketing emails about our products | Consent (newsletter sign-ups); or, for existing customers, legitimate interests and the "soft opt-in" under the Privacy and Electronic Communications Regulations - you can opt out in every email |
| Keep our website secure and working | Legitimate interests (protecting our site and visitors) |
| Measure whether our Google adverts lead to sales (only if you accept advertising cookies) | Consent - you can withdraw it at any time using "change settings" in the website footer |
| Prevent fraud, licence misuse, and defend legal claims | Legitimate interests; legal obligation |
4. Who we share it with
- Our checkout platform (Payhip - Payhip Ltd, UK). It runs our store, takes orders, delivers downloads and sends order and update emails, acting as our processor for the customer data it holds on our behalf. Where it acts as reseller for tax purposes (for example UK and EU VAT on digital products) it is an independent controller for the tax and invoicing data it processes, under its own privacy notice (https://payhip.com/privacy).
- Payment providers (for example Stripe or PayPal, whichever you choose at checkout) process your payment as independent controllers under their own privacy notices. We never see your full card number.
- Website host (Cloudflare) - processor, for hosting our website, DNS, security and forwarding emails sent to our support address.
- Email marketing provider - we may use MailerLite as our processor to manage our mailing list and send emails to people who sign up.
- Google (Google Ads) - if you accept advertising cookies, Google receives information about your visit (such as the advert you clicked, pages where a purchase or checkout click happened, and your IP address and device) to measure our adverts, under the Google Ads data processing and controller terms and Google's privacy policy (https://policies.google.com/privacy). We do not send Google your name or email address.
- Contact form provider - we may use Formspree as our processor to receive messages sent through the contact form on our website.
- Professional advisers (for example our accountant), HMRC and other authorities where the law requires.
- A buyer of our business, if we sell it, who will use your data in line with this policy.
We do not sell your personal data.
5. International transfers
Some of our providers may store or access data outside the UK (for example in the EU or USA). Where they do, we rely on UK adequacy regulations or on safeguards such as the UK International Data Transfer Addendum or Agreement, or the UK Extension to the EU-US Data Privacy Framework. In particular: Payhip states that it stores data on servers in the EU; Google, Cloudflare and Formspree are based in the USA and Cloudflare operates a global network; MailerLite is based in the EU; and payment providers such as Stripe and PayPal operate internationally.
6. How long we keep it
| Data | Retention |
|---|---|
| Order, invoice and licence records | 6 years after the end of the financial year of the sale (tax records), then deleted |
| Support emails and contact form messages | 3 years after the last message |
| Marketing list | Until you unsubscribe; then a suppression record so we don't email you again |
| Google Ads measurement data | Held by Google under its own retention policies; our advertising cookies expire after 90 days |
| Website server and security logs | Kept by our website host for a short period in line with its standard practice; we do not currently use website analytics |
7. Your rights
You have the right to: access your data; have it corrected; have it erased; restrict or object to our use of it (including an absolute right to object to direct marketing); data portability; and withdraw consent at any time. To exercise a right, email help@wardourclinical.co.uk. We will respond within one month (extendable in limited cases). We do not make decisions about you based solely on automated processing.
8. Complaints
Please contact us first at help@wardourclinical.co.uk - we will acknowledge your complaint within 30 days and respond without undue delay. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
9. Children
Our products and website are for organisations and adults. We do not knowingly collect data from children.
10. Changes
We will post any changes on this page with a new "last updated" date. Last updated: 15 October 2026.
11. Legislation and guidance used as reference
These documents were written from first principles with reference to the following (no third-party template text was copied):
- Consumer Rights Act 2015 (digital content, Part 1 Chapter 3; unfair terms, Part 2; s65 negligence liability): https://www.legislation.gov.uk/ukpga/2015/15/contents
- Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, reg 37: https://www.legislation.gov.uk/uksi/2013/3134/regulation/37
- BIS guidance on the Consumer Contracts Regulations: https://assets.publishing.service.gov.uk/media/5a817b92ed915d74e33fe73a/bis-13-1368-consumer-contracts-information-cancellation-and-additional-payments-regulations-guidance.pdf
- Unfair Contract Terms Act 1977 (s2 negligence, s11 reasonableness - business contracts): https://www.legislation.gov.uk/ukpga/1977/50/contents
- CMA guidance on unfair contract terms (CMA37): https://www.gov.uk/government/publications/unfair-contract-terms-cma37
- Contracts (Rights of Third Parties) Act 1999: https://www.legislation.gov.uk/ukpga/1999/31/contents
- UK GDPR and Data Protection Act 2018; ICO guide to UK GDPR: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/
- ICO guidance on storage and access technologies (cookies), April 2026: https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-the-use-of-storage-and-access-technologies
- Digital Markets, Competition and Consumers Act 2024 - subscription contracts regime (expected from January 2027): https://www.gov.uk/government/consultations/consultation-on-the-implementation-of-the-new-subscription-contracts-regime