CorpWell legal

Privacy Notice

How CorpWell handles personal information when you visit our website or interact with us.

Last updated: September 2026

CorpWell Limited (“CorpWell”, “we”, “us” or “our”) respects your privacy and is committed to handling personal information responsibly and in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

CorpWell is established in the United Kingdom and may provide services to organisations in the UK and internationally. Where our activities are subject to additional applicable data protection or privacy laws in another jurisdiction, we will comply with those requirements as they apply to the relevant processing.

This Privacy Notice explains how we collect and use personal information when you visit our website, contact us, book a discovery call, subscribe to our communications or otherwise interact with CorpWell.

1. Who we are

CorpWell Limited is a company registered in England and Wales.

Company number: 15980775

Registered office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF

Email: info@corp-well.com

For the purposes of UK data protection law, CorpWell Limited is the controller of the personal information described in this Privacy Notice.

2. Personal information we collect

Depending on how you interact with CorpWell, we may collect:

your name;
company or organisation name;
job title, where provided;
work or other email address;
telephone number;
information contained in an enquiry or message;
information provided when arranging or booking a discovery call;
your marketing and communication preferences;
records of consent, objections and unsubscribe requests; and
limited technical and usage information relating to your interaction with our website.

Our general website forms are not designed to collect medical information, health information, information about disability or neurodiversity, or other special-category personal information.

Please do not include medical, health or other sensitive personal information in a general website enquiry.

If a commissioned CorpWell service requires different categories of personal information, this will be considered separately and appropriate privacy and data-protection arrangements will be put in place where required. This may include providing additional privacy information, entering into appropriate data-processing arrangements or identifying an appropriate lawful basis and, where relevant, an Article 9 condition for processing special-category information.

3. How we collect personal information

We may collect information when you:

submit an enquiry through our website;
contact us by email, telephone or another business communication channel;
book a discovery call through Calendly;
subscribe to CorpWell Insights, news or other communications;
interact with our website; or
otherwise communicate with us about CorpWell or our services.

We may also receive ordinary professional contact information through legitimate business interactions, referrals, publicly available professional sources, organisations, prospective clients and professional contacts.

Where we obtain personal information from a source other than you, we will provide the information required by applicable data protection law within the relevant timeframe unless an applicable exception applies.

Where we collect information directly from you, you may generally choose whether to provide it. However, if you do not provide information needed to respond to an enquiry, arrange a meeting or provide a requested service, we may be unable to do so.

4. How and why we use personal information

We may use personal information to:

respond to enquiries;
understand an organisation’s requirements;
arrange and manage discovery calls;
communicate with prospective and existing clients;
manage business relationships;
provide CorpWell Insights and other appropriate business communications;
operate, understand, secure and improve our website;
administer website privacy choices and consent or objection records;
maintain appropriate business records;
prevent misuse, fraud or security incidents;
protect our legitimate business interests; and
comply with applicable legal or regulatory requirements.

Depending on the circumstances, our lawful basis may be:

Legitimate interests – including responding to business enquiries, managing professional relationships, administering and developing CorpWell, protecting our business, maintaining suppression records, securing our systems and undertaking appropriate business-to-business marketing. Before relying on legitimate interests, we consider whether our interests are balanced against your rights and freedoms.

Consent – where you have actively chosen to receive communications, accepted a cookie or similar technology where consent is required, or where consent is otherwise required by law. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Contract – where processing is necessary to perform a contract with an individual or to take steps at that individual’s request before entering into one.

Legal obligation – where processing is necessary for us to comply with applicable law.

Where we process special-category personal information, we will identify an additional condition under Article 9 UK GDPR and any other applicable legal requirements before doing so.

5. Discovery calls

CorpWell uses Calendly to facilitate discovery-call bookings.

Information provided when making a booking may be processed through Calendly and CorpWell’s Microsoft 365/Outlook environment for the purposes of arranging and managing the meeting.

Calendly may process information in accordance with its own applicable privacy arrangements. Depending on the relevant processing, third-party service providers may have their own responsibilities under data protection law.

We do not ask you to provide medical, health or other special-category information when booking a general discovery call.

6. Website analytics

CorpWell uses website analytics to understand how visitors use our website and to help us improve its content, performance and user experience.

Our website may use:

Google Analytics; and
analytics functionality associated with our website platform, Lovable.

Analytics may involve information such as pages viewed, approximate location, device or browser information, referral source, interaction data and online identifiers. The exact information collected depends on the configuration of the relevant service.

Our use of analytics and associated storage or access technologies will be configured in accordance with applicable UK data protection and electronic communications requirements.

Where we rely on an applicable statistical-purpose exception, we will provide appropriate information and a simple and free means for visitors to object. We will not rely on that exception for online advertising, individual profiling or linking website activity to advertising partners.

Where consent is required for a particular technology or purpose, the technology will be subject to the appropriate consent mechanism before it is activated. We will not treat continued browsing as consent where affirmative consent is required.

More information is provided in our Cookie Policy and website privacy controls.

7. Direct marketing

CorpWell may provide Insights, research, news, service information and other relevant business communications by email or other electronic means.

Submitting a general enquiry does not automatically subscribe you to a consent-based newsletter list.

Different electronic-marketing rules may apply depending on whether the recipient is a corporate subscriber or an individual subscriber, such as a sole trader or certain types of partnership. CorpWell will apply the appropriate requirements under the Privacy and Electronic Communications Regulations 2003 (PECR).

Where PECR requires consent, we will obtain consent before sending electronic direct marketing.

Where PECR permits marketing to a corporate subscriber without prior consent, we will still identify CorpWell, provide an appropriate opt-out method and comply with applicable UK data protection requirements where personal data is processed.

Where the “soft opt-in” is relied upon for an individual subscriber, we will only use it where its legal requirements are satisfied.

We will not send marketing by telephone where doing so would breach applicable Telephone Preference Service or Corporate Telephone Preference Service requirements.

You can object to or unsubscribe from direct marketing at any time by following the unsubscribe instructions in the communication, replying with “unsubscribe”, or contacting info@corp-well.com.

Where someone opts out, we may retain limited information on a suppression or do-not-contact record so that we can respect that request.

Opting out of marketing does not prevent us from sending necessary service or administrative communications relating to an enquiry, booking, contract, existing business relationship or commissioned service.

We do not sell personal information.

Where reasonably necessary, personal information may be processed by or shared with organisations supporting CorpWell’s operations, which may include:

Microsoft 365;
Calendly;
Lovable and relevant website or hosting infrastructure;
Google, in connection with Google Analytics where used;
technology, website, security and IT providers;
email, communications and marketing-service providers;
professional advisers, insurers and auditors; and
other professional or service providers where genuinely necessary for the relevant purpose.

These organisations may have different roles under data protection law depending on the relevant service and processing activity.

Where a provider acts as our processor, we will put appropriate contractual arrangements in place as required by applicable data protection law.

Where necessary for commissioned work, appropriate information may also be provided to a CorpWell specialist or facilitator involved in the relevant assignment.

We may also disclose personal information where necessary to comply with law, enforce our rights, protect individuals or systems, or respond to lawful requests from public authorities.

Commissioned work will be subject to appropriate contractual and data-protection arrangements where required.

9. International clients and international transfers

CorpWell may work with clients, participants, specialists, suppliers and service providers located in the UK and internationally.

Working with an international organisation does not necessarily mean that personal information will be transferred outside the UK. Where personal information protected by UK data protection law is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable UK international-transfer requirements.

Depending on the destination and circumstances, this may include reliance on UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, another legally recognised transfer mechanism, or an applicable exception where permitted by law.

Where required, we will undertake appropriate transfer-risk assessment and implement supplementary safeguards.

Where CorpWell’s activities in another jurisdiction independently bring those activities within the scope of applicable overseas data protection or privacy legislation, we will assess and comply with those requirements as they apply to the relevant processing. This may include additional transparency, contractual, transfer or representative requirements where legally required.

You can contact us if you would like further information about safeguards applicable to a particular international transfer.

10. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, contractual or regulatory requirements.

As a general approach:

unsuccessful or inactive prospective-client enquiries will normally be retained for up to 12 months after the last meaningful interaction, unless there is a justified reason for longer retention;
discovery-call and business-contact records will normally be retained for as long as reasonably necessary to manage the relationship and any resulting business activity;
marketing information will be retained while it remains relevant to our communications and subject to your right to object or unsubscribe;
consent, objection and unsubscribe records may be retained for as long as necessary to demonstrate compliance and prevent unwanted marketing;
limited suppression information may be retained where necessary to ensure an opt-out continues to be respected; and
client and commissioned-work records may be retained for longer where necessary for contractual, accounting, tax, legal or legitimate business purposes.

We will delete or anonymise information when it is no longer reasonably required.

11. Security

CorpWell takes reasonable and proportionate organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, authentication, confidentiality obligations, secure service providers, backups, device and account security, staff awareness and procedures for responding to suspected personal-data breaches.

No method of transmission or storage is completely secure. If we become aware of a personal-data breach, we will assess and respond to it in accordance with applicable legal requirements, including notifying the relevant regulator and affected individuals where legally required.

12. Your rights

Depending on the circumstances, UK data protection law may give you rights including access, rectification, erasure, restriction, objection, data portability, withdrawal of consent and rights relating to certain solely automated decisions.

These rights are not all absolute and their application depends on the circumstances.

Your right to object to direct marketing

You have an absolute right to object to the use of your personal information for direct marketing, including profiling related to direct marketing. If you object, we will stop using your personal information for that purpose.

We may retain limited suppression information where necessary to ensure that we continue to respect your objection.

CorpWell does not currently use solely automated decision-making that produces legal or similarly significant effects on individuals.

To exercise a data protection right, contact info@corp-well.com.

You do not normally have to pay to exercise your rights. We will respond within the period required by applicable data protection law.

We may take reasonable steps to verify your identity before responding.

13. Cookies and similar technologies

Our website may use cookies, scripts, tags, pixels and other storage or access technologies for website operation, analytics and other functionality.

Where consent is legally required, we will request it before activating the relevant technology.

Where we rely on an applicable legal exception, we will comply with the conditions of that exception, including providing clear information and a simple means of objecting where required.

You can change or withdraw applicable choices through the website’s Cookie Settings or Privacy Choices control.

Our Cookie Policy provides further information.

14. Third-party websites and services

Our website may contain links to or integrations with third-party websites and services.

Third-party organisations may process information under their own privacy arrangements. We encourage you to review their privacy information where appropriate.

15. Changes to this Privacy Notice

We may update this Privacy Notice where our business, website, technology, suppliers, international activities or legal obligations change.

The latest version will be published on our website and the “Last updated” date will be amended accordingly.

16. Contact and complaints

For questions about this Privacy Notice, how CorpWell uses personal information or your data protection rights, contact:

CorpWell Limited

167-169 Great Portland Street, 5th Floor, London, W1W 5PF