Privacy Policy

What's On Wendover is a trading name of Chiltern Digital Ltd

Last updated: April 2026

1. Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how Chiltern Digital Ltd (trading as What's On Wendover) collects, uses and protects your personal data when you visit whatsonwendover.co.uk, interact with us, or use any of our services.

Our services include:

  • A local business directory for Wendover and the surrounding parishes

  • Business listing and membership services for local businesses

  • An events listing and submission service

  • Digital marketing services

  • A community blog and content marketing publication

  • An email newsletter

This website is not intended for children and we do not knowingly collect data relating to children under the age of 13.

Please read this Privacy Policy carefully. It should be read alongside any other privacy notice we provide on specific occasions when we are collecting or processing personal data about you.

2. Who We Are

Controller

Chiltern Digital Ltd is the data controller responsible for your personal data. What's On Wendover is a trading name of Chiltern Digital Ltd.

If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact our data privacy manager using the details below.

Contact Details

Legal entity Chiltern Digital Ltd
Trading name What's On Wendover
Data privacy manager Marie Evans
Email hello@whatsonwendover.co.uk
Website whatsonwendover.co.uk

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

3. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer the following categories of personal data:

Category Description
Identity data First name, last name, username or similar identifier, title
Contact data Email address, telephone number, business address or billing address
Business data Business name, business type, business description, website URL, social media handles, opening hours, and other information you provide for your directory listing
Transaction data Details of payments to us and details of products and services you have purchased from us, including membership subscriptions and event submission fees
Technical data IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website
Profile data Username and password, purchases or orders made by you, your interests and preferences, feedback and survey responses
Usage data Information about how you use our website, products and services
Marketing and communications data Your preferences in receiving marketing communications from us, and your communication preferences
Content data Any content you submit to us, including event listings, reviews, comments, or other user-generated content

We also collect, use and share aggregated data (such as statistical or demographic data) for any purpose. Aggregated data is not considered personal data as it does not directly or indirectly reveal your identity.

We do not collect any Special Categories of Personal Data (which includes data about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, or genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

4. How We Collect Your Personal Data

We use the following methods to collect data from and about you:

Direct Interactions

You may provide us with your Identity, Contact, Business, Transaction, Profile and Marketing and Communications Data by filling in forms or by corresponding with us by phone, email or otherwise. This includes personal data you provide when you:

  • Register for a free or paid business listing or membership

  • Submit an event listing

  • Subscribe to our email newsletter

  • Contact us with an enquiry

  • Request digital marketing services

  • Enter a competition, promotion or survey

  • Submit content such as reviews, comments or blog contributions

  • Give us feedback

Automated Technologies and Interactions

As you interact with our website, we may automatically collect Technical and Usage Data about your equipment, browsing actions and patterns. We collect this data using cookies, server logs and similar technologies. Please see Section 10 (Cookies) and our separate Cookie Policy for further details.

Third Parties and Publicly Available Sources

We may receive personal data about you from the following third parties:

  • Analytics providers (such as Google Analytics) — Technical data

  • Payment and subscription providers (such as MembershipWorks) — Transaction and Contact data

  • Email marketing platforms (such as Mailchimp) — Marketing and Communications data

  • Squarespace (our website platform) — Technical and Usage data

5. How We Use Your Personal Data

We will only use your personal data when the law allows us to. The legal bases we rely on are:

  • Consent — where you have given us clear consent to process your data for a specific purpose

  • Contract — where processing is necessary to perform a contract with you, or to take steps at your request before entering into a contract

  • Legitimate interests — where it is necessary for our legitimate interests (or those of a third party), provided your interests and fundamental rights do not override those interests

  • Legal obligation — where we need to comply with a legal or regulatory obligation

The table below sets out the purposes for which we use your personal data and the legal bases we rely on:

Purpose / Activity Type of Data Lawful Basis
To register you as a new member or subscriber (a) Identity
(b) Contact		 Performance of a contract with you
To manage your business directory listing (creating, publishing and updating your listing profile) (a) Identity
(b) Contact
(c) Business
(d) Profile		 (a) Performance of a contract with you
(b) Legitimate interests (to operate the directory and provide value to visitors)
To process membership subscriptions and event submission fees (a) Identity
(b) Contact
(c) Transaction		 (a) Performance of a contract with you
(b) Legal obligation (accounting and tax records)
To process and publish event submissions (a) Identity
(b) Contact
(c) Content		 (a) Performance of a contract with you
(b) Legitimate interests (to operate and grow the events listing service)
To send our email newsletter to subscribers (a) Identity
(b) Contact
(c) Marketing and communications		 Consent
To send service communications to members (e.g. renewal reminders, account updates, policy changes) (a) Identity
(b) Contact
(c) Profile		 (a) Performance of a contract with you
(b) Legal obligation
To deliver digital marketing services to business clients (a) Identity
(b) Contact
(c) Business
(d) Transaction		 Performance of a contract with you
To publish blog and editorial content (which may reference local businesses and events) (a) Business
(b) Content		 Legitimate interests (to provide useful community content)
To administer and protect our website and business (troubleshooting, data analysis, testing, system maintenance) (a) Identity
(b) Contact
(c) Technical		 (a) Legitimate interests (IT services, security, fraud prevention)
(b) Legal obligation
To analyse how our website is used, improve our services and inform our content and marketing strategy (a) Technical
(b) Usage		 Legitimate interests (to develop and improve our services)
To make suggestions and recommendations to you about services that may be of interest (a) Identity
(b) Contact
(c) Usage
(d) Profile		 Legitimate interests (to develop our services and grow our business)

6. Marketing

Email Newsletter

We will only send you our email newsletter if you have actively opted in to receive it. You can unsubscribe at any time by clicking the unsubscribe link in any newsletter email or by contacting us at hello@whatsonwendover.co.uk.

Member Communications

If you are a paying member or have purchased a service from us, we may send you relevant service communications and information about our products and services. These are sent on the basis of our legitimate interests or performance of contract. You can opt out of promotional (non-essential) communications at any time.

Third-Party Marketing

We will obtain your express opt-in consent before sharing your personal data with any third party for marketing purposes.

How to Opt Out

To stop receiving marketing communications from us at any time:

Opting out of marketing will not affect service-related communications that are necessary for the administration of your account or membership.

7. Disclosures of Your Personal Data

We may share your personal data with the following third parties for the purposes described in this Privacy Policy:

Third Party Purpose Privacy Policy
Squarespace Website platform and hosting squarespace.com/privacy
MembershipWorks Membership and directory management, payment processing membershipworks.com/privacy
Mailchimp (Intuit) Email newsletter management and delivery mailchimp.com/legal/privacy
Google Website analytics (Google Analytics) and advertising tools policies.google.com/privacy
Meta (Facebook) Marketing and advertising (Facebook Pixel) facebook.com/privacy/policy
Zapier / Make Automation and data integration between platforms (where applicable) zapier.com/privacy
make.com/en/privacy-notice
Xero Accounting and financial reporting xero.com/uk/legal/privacy
Payment processors Processing subscription and event submission payments See relevant processor's policy

We may also share your personal data with professional advisers (such as legal and financial advisers) and, in the event of a business sale or merger, with prospective buyers or new owners, who will be bound to use it in accordance with this Privacy Policy.

We require all third parties to respect the security of your personal data and treat it in accordance with the law. We do not permit our third-party service providers to use your personal data for their own purposes.

8. Business Directory Listings — Special Note

If you register a business listing on What's On Wendover, certain information you provide (such as your business name, address, telephone number, website URL, description, and opening hours) will be published publicly on the website as part of your directory listing. This is the core purpose of the directory service and forms part of the contract with you.

Please only submit business information that you are authorised to publish and that you are happy to be publicly visible. If you wish to update or remove your listing, please contact us at hello@whatsonwendover.co.uk.

9. International Transfers

Some of our third-party service providers are based outside the UK or the European Economic Area (EEA). Where we transfer your personal data outside the UK or EEA, we ensure an equivalent level of protection by relying on one or more of the following safeguards:

  • Transfers to countries deemed adequate by the UK Information Commissioner or the European Commission

  • Use of the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs) approved by the European Commission

Please contact us if you would like further information about the specific transfer mechanism used for any particular third party.

10. Cookies

Our website uses cookies and similar tracking technologies to distinguish you from other users and to improve your experience. We also use the Facebook Pixel to understand the effectiveness of our advertising.

You can set your browser to refuse all or some cookies, or to alert you when cookies are set or accessed. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

For full details of the cookies we use, why we use them, and how you can manage them, please see our Cookie Policy.

11. Data Security

We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those who have a genuine business need to know it.

We have procedures in place to deal with any suspected personal data breach and will notify you and the ICO where we are legally required to do so.

Please note that the transmission of data over the internet is never completely secure. While we take all reasonable steps to protect your data, we cannot guarantee the security of data transmitted to our website.

12. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting obligations.

In determining the appropriate retention period, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, and applicable legal requirements.

  • Member and customer records (including contact, identity, financial and transaction data): retained for 6 years after the end of the relationship, as required by tax law

  • Newsletter subscriber data: retained until you unsubscribe or request deletion

  • Business directory listing data: retained for the duration of your membership and for a reasonable period thereafter; upon your request, we will remove your listing

  • Event submission data: retained for the duration of the event listing and for a reasonable period thereafter for record-keeping purposes

  • Technical and usage data (e.g. analytics): typically retained for up to 26 months

In some circumstances we may anonymise your personal data (so it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice.

13. Your Legal Rights

Under UK data protection law, you have the following rights in relation to your personal data:

Right What It Means
Right of access You can request a copy of the personal data we hold about you (a 'Subject Access Request').
Right to rectification You can ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure You can ask us to delete your personal data where there is no good reason for us to continue processing it. Note: we may not always be able to comply if we have a legal obligation to retain data.
Right to object You can object to our processing of your personal data where we rely on legitimate interests or where we use it for direct marketing.
Right to restrict processing You can ask us to suspend processing of your data in certain circumstances (e.g. while we verify its accuracy or investigate an objection).
Right to data portability You can request that we transfer your data to you or to a third party in a structured, commonly used, machine-readable format. This applies to data processed by automated means on the basis of your consent or a contract.
Right to withdraw consent Where we rely on consent to process your data, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before your withdrawal.

To exercise any of these rights, please contact us at hello@whatsonwendover.co.uk or via the contact page on our website. You will not normally have to pay a fee. We will respond to all legitimate requests within one month.

If your request is particularly complex or you have made multiple requests, it may take us longer than one month. We will notify you and keep you updated in such cases.

We may need to verify your identity before processing your request. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

You also have the right to make a complaint to the Information Commissioner's Office (ICO) at any time. Details are available at www.ico.org.uk.

14. Third-Party Links

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. When you leave our website, we encourage you to read the privacy policy of every website you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. When we make material changes, we will update the 'last updated' date at the top of this document and, where appropriate, notify you by email or via a notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

16. How to Contact Us

If you have any questions about this Privacy Policy or the way we handle your personal data, please contact us: