Privacy Policy – WightSpark

Effective Date: 15 July 2025
Website: https://wightspark.com
Jurisdiction: United Kingdom

At WightSpark ("we", "our", or "us"), your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal and business data. It applies to users of our website, GPT tools, and our custom GPT consulting services.

1. Who This Policy Covers

This policy applies to two types of users:

• Public Users: Visitors of WightSpark.com and users of the free WightSpark GPT tool.
• Private Clients: Businesses or individuals who engage us for GPT consulting, setup, or development services.

2. What Data We Collect
a) For Public Users:
We collect:

• Name (if provided)
• Business name (optional)
• Email address (submitted through forms or opt-ins)

We do not collect any information from your GPT chats within ChatGPT. These are handled by OpenAI, and we do not have access to chat transcripts unless you explicitly share them with us.

b) For Private Clients:
In the course of providing services, we may collect:

• Contact details (name, email, business info)
• Project-related data (e.g. information to train or configure GPTs, such as internal documents, FAQs, or data shared for GPT knowledgebases)
• Preferences and requirements discussed during consultations

We treat this data as confidential and use it solely to deliver the agreed services.

3. How We Use Your Information

We use collected data to:

• Provide and improve our services
• Communicate with you
• Deliver GPT development, consulting, or training as requested
• Maintain internal records for project delivery and tax compliance

We do not sell your information. We only share data with trusted service providers where necessary (e.g. email platforms, hosting, or legal/accounting support).

4. Hosting & Third Parties

• Our GPT tools operate inside OpenAI's ChatGPT platform. Use of these tools is also subject to OpenAI's Terms and Privacy Policy.
• Our website uses Google Analytics, which sets cookies to track anonymized usage data. Learn more at: https://policies.google.com/privacy
  

5. Legal Basis for Processing (UK GDPR)

We rely on the following legal bases:

• Consent: You voluntarily provide your data.
• Legitimate Interest: To communicate with clients and deliver requested services.
• Contractual Necessity: Where data is needed to fulfill a service agreement.
• Legal Obligation: To meet accounting or tax requirements.

6. Data Storage & Retention

We retain data only as long as necessary for the purpose collected:

• Basic contact information: Until you unsubscribe or request deletion
• Consulting project files: Retained securely for up to 2 years unless agreed otherwise

You may request deletion at any time (unless restricted by legal obligations).

7. Your Rights (UK GDPR)

You have the right to:

• Access your data
• Correct inaccurate data
• Request erasure
• Object to processing
  
  Data portability (where applicable)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

8. Contact
To exercise your rights or raise any concerns, contact us.