Legal

Privacy policy

Effective 4 October 2026

1. What this policy covers

This policy explains how Why Now Desk processes personal data when you visit whynowdesk.com, buy a service, communicate with us, or appear in research undertaken for a business customer. We aim to use the minimum information needed to provide the service.

2. Information we process

Depending on how you interact with us, this can include:

• professional contact information you provide, such as your name, business email address, company and job role;
• your agency brief, including your website, services, ideal-client criteria and project preferences;
• transaction and billing information. Card and payment-account details are handled by Stripe; we do not receive your full card details;
• communications you send to us; and
• limited publicly available professional information used in research, such as a company event, a person’s publicly stated role, or a published business contact route.

3. Why we use it

We process information to provide and improve the service, answer questions, deliver purchased briefs, prevent misuse, keep necessary business records and meet legal obligations. The usual legal bases are performance of a contract, compliance with a legal obligation and our legitimate interests in operating a focused B2B research service. We do not use personal data to make solely automated decisions with legal or similarly significant effects.

4. Who receives it

We use service providers only where necessary to operate the service: Stripe for payment processing, Vercel for website hosting and security, and an email provider for business correspondence. Those providers process data under their own terms and privacy notices. We do not sell personal data or operate an advertising audience.

5. Retention

We keep client-brief and correspondence data for up to 24 months after the last substantive interaction, unless a longer period is necessary for a legal claim or required accounting and tax record. Payment and invoice records are retained for the period required by applicable law. Research notes are reviewed and removed when no longer reasonably needed for the service.

6. International transfers

Some providers may process data outside the European Economic Area. Where that occurs, we rely on the safeguards made available by the relevant provider and applicable law, such as an adequacy decision or standard contractual clauses where appropriate.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection to processing. You may also complain to your local data-protection authority. To make a request, email alex@whynowdesk.com; we may ask for enough information to verify the request.

8. Cookies

Our approach to cookies is set out in the Cookie Notice. The site does not use advertising or analytics cookies operated by Why Now Desk.

9. Changes

We may update this policy as the service changes. The effective date at the top shows when it was last revised.