Last updated: 22 July 2026
1. Who is responsible for your information
Dominic Hartland trading as Waypoint is the controller responsible for the personal information described in this notice. Waypoint is a sole trader based in England.
For privacy questions or to exercise your rights, email [email protected]. Correspondence about this website is currently handled by email.
2. What this notice covers
This notice covers the public website at usewaypoint.co.uk and personal information used to handle contact enquiries, requests for invitation-only or early access to the Waypoint platform, pricing enquiries and enquiries about separately delivered IT Services.
The Waypoint application is a separate service. If an enquiry develops into access to the application or a customer relationship, additional contractual and privacy information may apply to that relationship.
3. Information collected
Waypoint may collect your name, business name, email address, enquiry type, message, plan or service context, later correspondence, and limited technical and security information needed to deliver and protect the website. The source IP address is processed for rate limiting. The website does not currently use an analytics service or advertising trackers.
4. Why the information is used and the lawful bases
Waypoint uses information to respond to enquiries and assess early-access, plan or service requests under its legitimate interests in operating the business and responding to people who contact it, and where applicable to take steps you request before entering a contract. Website delivery, spam prevention and rate limiting rely on Waypoint’s legitimate interests in keeping the service secure and reliable. Necessary business and legal records are kept under legitimate interests or a legal obligation where one applies.
Waypoint does not use enquiry information for automated decision-making or profiling and does not sell personal information.
5. Who receives the information
Cloudflare, Inc. provides hosting, content delivery, DNS, server-side Pages Functions and Workers KV rate limiting. Plus Five Five, Inc. (Resend) provides transactional email delivery. Information may also be disclosed where necessary to professional advisers, insurers, courts, regulators or public authorities, or where required by law.
6. International transfers
Cloudflare and Resend operate international infrastructure and may process personal information outside the UK, including in the United States. Where UK adequacy regulations do not apply, their data-processing terms provide recognised safeguards such as the UK Addendum to the EU Standard Contractual Clauses. Resend also states that it participates in the UK Extension to the EU-US Data Privacy Framework.
7. How long information is kept
Enquiry information will normally be retained for up to 12 months after the last meaningful contact. If the enquiry develops into a customer relationship, relevant information may instead be retained under the applicable customer, contractual, accounting and legal retention requirements.
The salted rate-limit record expires after approximately 10 minutes. Providers may retain limited operational and security records under their service terms and legal obligations.
8. Your data-protection rights
Depending on the circumstances, you may ask for access, correction, erasure, restriction or portability of your information, or object to processing based on legitimate interests. These rights are not absolute. Waypoint may confirm your identity and will normally respond within one month.
9. Complaints
Please contact Waypoint first so the concern can be addressed. You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
10. Security
Waypoint uses encrypted HTTPS transport, server-side processing and credentials, validation, length limits, sanitised email content, a honeypot control and short-lived rate limiting based on a salted IP hash. The handler does not intentionally write submitted enquiry content to application logs. No transmission or storage method is completely secure.
11. Changes and contact
The current version and update date will be published here when this notice changes. Use the contact page for general enquiries or email [email protected] about privacy.