Privacy Policy

1. Who We Are

WAJIBU (“we”, “us”, “our”) is an Environmental, Social & Governance consultancy based in London, United Kingdom. Our registered address is 66 Paul Street, London, EC2A 4NA.

We are the data controller for all personal data collected through this website (wajibu.co.uk). Our lead contact for data privacy matters is Samuel Orie, Director & Founder, reachable at Admin1@wajibu.uk.

This privacy policy applies to all personal data we process in connection with this website and our advisory services. It is written in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

Data you provide directly

When you complete a form, book a meeting or subscribe to our newsletter on this website, we may collect:

• Your full name
• Your email address
• Your phone number (if provided)
• Your company name and job title
• Your industry sector
• The nature of your enquiry or message
• Your preferred meeting date, time and format
• Any budget or timeline information you choose to share

Data collected automatically

When you visit our website, we may automatically collect certain technical data, including your IP address, browser type, device type, operating system, pages visited, and time spent on each page. This data is collected via cookies and is used solely for analytics and website improvement purposes.

Data we do not collect

We do not collect sensitive personal data (such as health information, racial or ethnic origin, political opinions or financial account details) through this website unless you voluntarily provide it in a free-text message field.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiry — when you contact us, we use your details to reply and provide the information or advice you requested
• To schedule and confirm meetings — when you book a discovery call, we use your details to confirm the appointment and send you joining information
• To send ESG insights and updates — if you subscribe to our newsletter, we use your email to send our monthly ESG digest. You can unsubscribe at any time
• To improve our website and services — anonymised analytics data helps us understand how visitors use our website and where we can make it better
• To comply with legal obligations — we may retain certain records as required by UK law

We do not use your data for automated decision-making or profiling. We do not use it for any purpose other than those listed above without obtaining your explicit consent.

4. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Legitimate interests — processing your enquiry and responding to your request for information about our services
• Consent — sending you our newsletter or ESG insights (you can withdraw consent at any time)
• Contract performance — where we are engaged to deliver services, processing your data is necessary to fulfil that contract
• Legal obligation — where we are required by law to retain or share certain information

5. Who We Share Your Data With

We do not sell, rent or trade your personal data to any third party. We may share your data only in the following limited circumstances:

• Web3Forms — our website forms are processed via Web3Forms (web3forms.com), a secure form processing service. They receive your submission data solely for the purpose of delivering it to us
• Google — if you click an email link on our website, it opens Gmail via a Google URL. Google's own privacy policy applies to that interaction
• Legal requirements — we may disclose your data if required to do so by law, court order or regulatory authority
• Professional advisors — our legal and accounting advisors may access data on a strictly confidential basis where necessary

All third parties with whom we share data are required to maintain appropriate security measures and may only use your data for the specific purpose for which it was shared.

6. How Long We Keep Your Data

• Enquiry data — retained for 2 years from the date of your last contact with us
• Meeting booking data — retained for 12 months following the meeting
• Newsletter subscriber data — retained until you unsubscribe, after which it is deleted within 30 days
• Client engagement data — retained for 7 years following the end of an engagement, as required for legal and accounting purposes

After these periods expire, your data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your data (“right to be forgotten”)
• Right to restrict processing — you can ask us to pause processing of your data in certain circumstances
• Right to data portability — you can request your data in a structured, machine-readable format
• Right to object — you can object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at Admin1@wajibu.uk. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies

This website uses minimal cookies. We use only essential cookies required for the website to function correctly. We do not currently use tracking, advertising or analytics cookies that require your consent.

If we introduce non-essential cookies in the future, we will update this policy and implement a cookie consent mechanism in compliance with UK GDPR and PECR.

You can control cookie settings through your browser at any time. Disabling cookies may affect the functionality of certain website features.

9. Contact Us

If you have any questions about this privacy policy, how we handle your data, or wish to exercise your rights, please contact us:

We reserve the right to update this privacy policy at any time. The “Last updated” date at the top of this page will always reflect when changes were last made. We encourage you to review this policy periodically.