Waystation Limited Privacy Policy

Last Updated: 2nd June, 2026

Waystation Limited ("the Company", "we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, process, use, and protect personal data when you interact with our website, our proprietary Fit-P2P Lifecycle services, and our diagnostic systems.

We operate as a Data Controller for our direct corporate clients, and as a Data Processor when executing diagnostic workflows on behalf of our client organisations.

1. Our Contact Details

• EntityWaystation Limited
• DesignationThe Data Protection Officer
• Registered Address124 City Road, London, EC1V 2NX
• Corporate Email data@waystationltd.com

2. The Types of Personal Data We Collect

We currently collect and process the following categories of information:

• Corporate Contact Identifiers: Name, business email address, corporate phone number, job title, and company name.
• Financial & Transactional Data: Bank account numbers, sort codes, billing addresses, and payment history necessary to process contract milestones.
• Diagnostic & "Lived Experience" Data: Qualitative feedback, questionnaire responses, interviews, and organizational commentary gathered from leadership and employees during our Alignment Lab, Coaching, and Offboarding loops.
• Digital Analytics: IP addresses, browser types, and usage data captured via cookies when navigating our global website.

3. How We Obtain Data and Our Lawful Bases for Processing

Most of the data we process is provided directly by you or your employing organisation. We also capture professional data indirectly via verified channels such as LinkedIn to aid in precision sourcing during our Recruitment stage.

Under the UK General Data Protection Regulation (UK GDPR), the specific Lawful Bases we rely on to process this data are:

• (a) Contractual Necessity: We require this data to perform our obligations under our Master Terms of Business and active Statements of Work (e.g., executing the Fit-P2P Lifecycle).
• (b) Legitimate Interests: We process corporate information to manage our business relationship, protect our networks, and continuously refine our proprietary DNA diagnostic methodologies.
• (c) Legal Obligation: Where we are required by UK law to maintain tax, accounting, or corporate records.
• (d) Consent: Where you have explicitly opted-in to receive professional insights or updates from our collective community. (You can withdraw consent at any time by emailing data@waystationltd.com).

4. Anonymisation & The Protect-Identity Rule

To ensure absolute psychological safety and unvarnished honesty within the Alignment Lab and Offboarding diagnostic stages, all qualitative team feedback and workspace surveys are heavily aggregated and anonymised. Individual candidate or employee responses are filtered into macro organizational trend streams, ensuring individual identities are permanently protected from employer visibility unless explicit consent is granted.

We do not share, sell, or rent personal data to third parties, except with your explicit instruction or when managing secured compliance validation within our vetted executive recruitment networks.

5. Data Storage, Retention & Security

Your data is securely stored within high-encryption, UK/EEA-compliant cloud architectures.

We maintain strict corporate data retention limits:

• Active Client Data: Retained for the active duration of our commercial contract.
• Post-Contract Archive: Retained for a maximum period of three (3) years following contract completion to comply with statutory UK corporate auditing, tax compliance, and preference management.
• Secure Disposal: Following this period, digital records are permanently purged using secure deletion algorithms, and any physical media is confidentially shredded.

6. Your Data Protection Rights

Under UK data protection law, you hold the following statutory rights regarding your personal data:

• Right of Access: You have the right to request copies of your personal data.
• Right to Rectification: You can request that we correct or complete inaccurate data.
• Right to Erasure: You can ask us to delete your data under certain legal conditions.
• Right to Restrict/Object: You can challenge or restrict our processing of your data under specific parameters.
• Right to Data Portability: You can request the transfer of your data to another organisation.

You are never required to pay a fee to exercise your rights. Upon receiving a valid identity-verified request, we have one calendar month to respond. To exercise these rights, please contact us at: data@waystationltd.com.

7. Regulatory Accountability & Complaints

If you have any concerns regarding how we manage your organizational data, please contact us directly so we can resolve the matter immediately.

You also maintain the permanent right to escalate complaints to the UK supervisory authority:

• AuthorityThe Information Commissioner's Office (ICO)
• AddressWycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline0303 123 1113
• Websitehttps://www.ico.org.uk