Privacy Policy

Why Not I Ltd ("Why Not I", "we", "us") is a company registered in England and Wales. We provide a behavioural performance platform to sporting organisations.

Registered address: 1st Floor Cannon Mill, Gunco Lane, Macclesfield SK11 7JL
Company number: 15020809
ICO registration number: ZC241339
Contact: privacy@whynoti.co.uk

We have not appointed a Data Protection Officer. Our processing is not carried out on a large scale within the meaning of Article 37(1)(c) of the UK GDPR, and we keep this under review as we grow.

This policy explains what we do with personal information where we decide why and how it is used — in data protection terms, where we are the controller. That means:

• Visitors to whynoti.co.uk
• People who contact us through the website, by email or otherwise
• Staff and representatives at client organisations, prospective clients and partners
• Investors and advisors
• Information we use to improve our behavioural model, and research where an athlete has separately agreed to it

It does not cover athlete and staff information held on the platform. For that, the client organisation is the controller and we act on its instructions. See the Platform Privacy Notice.

whynoti.co.uk sets no cookies of its own and uses no analytics or tracking of any kind. There are no third-party trackers, advertising scripts or embedded content on the site.

Our hosting provider may set essential security cookies necessary for the site to operate. These are strictly necessary and require no consent under the Privacy and Electronic Communications Regulations.

Our hosting provider also records standard connection information when the site is served — IP addresses, request headers and access logs.

Our lawful basis is our legitimate interests in operating a secure and functioning website.

When you use the enquiry form or contact us directly, we store your name, email address, organisation, role and message so that we can respond.

This information is held in our own systems and is not shared with any third party. We keep it for 24 months from our last contact with you, and you can ask us to delete it sooner at any time.

Our lawful basis is our legitimate interests in responding to enquiries and in pursuing commercial conversations, or the steps necessary to enter into a contract where you are negotiating one with us.

Where you are a member of staff at a club, academy or other organisation we work with or are speaking to, we hold your name, role, work email address, telephone number and a record of our correspondence and meetings.

We use it to manage the relationship, to deliver and support the platform, to issue agreements and invoices, and to keep in touch about our work.

Our lawful basis is our legitimate interests in managing business relationships, and the performance of a contract where one is in place.

We keep this information for the duration of the relationship and for six years afterwards, which reflects the period in which a contractual claim could be brought.

Where you are an investor, prospective investor or advisor, we hold your name, contact details, correspondence, and any information necessary for the investment itself.

Our lawful basis is our legitimate interests in raising investment and taking advice, the performance of a contract, and our legal obligations where company or tax law requires a record.

We keep this for the duration of the relationship and for the period required by company and tax law.

We use information generated through the platform for two of our own purposes, as controller rather than processor.

Improving our behavioural model. We use aggregated information from which no individual can be identified. Our lawful basis is our legitimate interests in developing and improving the product.

Research. We carry out research only where an athlete has separately and specifically agreed to it. That agreement is never bundled with anything else, refusing it has no effect on anything, and it can be withdrawn at any time. The athlete's organisation is never told who agreed and who did not. Our lawful basis is consent, with scientific research as the condition for any special category information.

We treat information generated at pilot scale as pseudonymised rather than anonymised, and therefore as still within the scope of data protection law. We do not describe information as anonymised — in this policy, in client material, or in any research output — unless a dataset is large enough that the claim genuinely holds.

We use the following providers in running our business. Each is bound by a written contract requiring them to process information only on our instructions and to keep it secure.

Where information is transferred outside the United Kingdom to a country not covered by adequacy regulations, we rely on the International Data Transfer Addendum to the European Commission's standard contractual clauses.

We do not sell personal information and we do not share it for advertising.

Under UK data protection law you have the right to:

• Be informed about how your information is used — this policy
• Access the information held about you
• Have inaccurate information corrected
• Have information erased in certain circumstances
• Restrict how your information is used
• Object to processing based on our legitimate interests
• Receive your information in a portable format
• Withdraw agreement at any time, where processing relies on it

To exercise any of these, contact privacy@whynoti.co.uk. We will acknowledge within five working days and respond within one month.

Information is encrypted in transit and at rest, access is restricted to those who need it, and accounts are protected by two-factor authentication. No system can be guaranteed completely secure, but we take these measures seriously and review them as we grow.

We will update this policy when what we do changes. The date of the current version appears at the top.

If you are unhappy with how we have handled your information, please contact us first at privacy@whynoti.co.uk so we can try to put it right.

You also have the right to complain to the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
ico.org.uk