Data, security and compliance
We build and operate our own platforms, so looking after data is part of our day job. Here is exactly how we handle it.
UK and EU data residency
Your data and the servers it lives on stay inside the UK and the EU. It does not get shipped elsewhere to cut costs.
GDPR from the ground up
Every platform is built to UK GDPR from the start. Clear consent, clear retention, clear rights.
Encrypted in transit and at rest
Data is encrypted on the wire and on disk, and access is limited to what each role genuinely needs.
Your data stays yours
We do not sell it and we do not train models on it. You can export it, or ask us to delete it, whenever you like.
Aiming for WCAG 2.2 AA
Every page works with a keyboard alone, with a visible focus indicator.
Accessibility statementPublic service status
Every platform we run, and every live domain, in one place.
Service status
Your data is yours, under UK GDPR
You stay in control of your information at every step. At any time you can ask us to do any of the following, and we will.
- See the data we hold about you
- Get a copy of it, in a portable format
- Correct anything that is wrong
- Have it deleted when you no longer need us
- Object to how it is used, and withdraw consent
-
Encrypted in transit and at rest
Traffic is served over TLS, and stored data is encrypted on disk. Nothing sensitive sits in the clear.
-
Least-privilege access
People and services only reach the data they genuinely need, and access is logged.
-
Backed up and recoverable
Platforms are backed up regularly so a bad day does not become a lost week.
-
Monitored, not set and forgotten
We run these platforms ourselves, so we watch them, patch them and keep them current.
Registered, and accountable
Whealbit is a real company, run by people you can reach, based in Penzance, Cornwall, United Kingdom. Registered with Dun & Bradstreet. If you have a question about your data, write to us and a person will answer.