Privacy Policy

Who we are

Viscara Media is a trading name of WPB Holding Ltd, registered in England and Wales under company number 17520349. Our registered office is 5th Floor, 167–169 Great Portland Street, London, W1W 5PF. WPB Holding Ltd is the controller of personal information described in this notice.

Contact Viscara Media

For privacy questions, corrections, access or deletion requests, contact info@viscaramedia.com. Our data-request page explains how to make a request without sending unnecessary identity documents.

What we handle

• Enquiries: your name, email, optional business name, selected service and message. An online presence review also includes your trade, area and any public website, Google profile or social link you provide.
• Accounts and service delivery: account details, business information, briefs, project messages, approvals, uploaded photographs/files and deliverables. Optional Google sign-in provides basic profile details.
• Billing: quote, invoice and payment-status records. Stripe handles card information directly; the application does not collect full card details in its own forms.
• Security and operations: authentication/session information, relevant access logs, abuse-prevention signals and notification subscriptions when enabled.
• Optional public-page analytics and performance measurements, only when you choose to allow them. See Cookies & privacy settings for the information measured and controls.

Provide only information relevant to your enquiry or project. Avoid uploading identity documents, sensitive personal information, passwords or unrelated information about other people.

Why we use it

We use information to respond to requested enquiries, prepare quotes, deliver and support agreed services, handle payments, protect accounts, resolve disputes and comply with applicable legal obligations. Optional measurement helps us understand public-page use and performance. Enquiry forms do not sign you up to a newsletter.

Where data-protection law requires a lawful basis, these activities depend on steps requested before a contract or contract performance, legitimate interests in running and securing the service, legal obligations, or consent for optional measurement. You may withdraw that consent at any time. We do not sell personal information.

Providers and disclosures

• Website hosting and measurement providers: serving the site and, if you allow it, measuring public-page visits and performance.
• Supabase: database, authentication and uploaded-file storage.
• Resend: account, enquiry, billing and service emails.
• hCaptcha: abuse prevention on account-related forms.
• Google: optional account sign-in; Google services involved in your agreed visibility work.
• Stripe: payment processing and recurring billing where enabled.
• Anthropic: AI-assisted drafting features can send the business context and text supplied to those features to Anthropic. Avoid including unnecessary personal or confidential information in drafting prompts.
• Social platforms and other project providers: information needed to carry out the specific service you authorise. We may also disclose information when required by law or to resolve a legal claim.

International processing

Providers may process information outside your country. Locations and contractual safeguards depend on the services and account configuration in use. Contact us for information about the arrangements relevant to your data. Applicable international-transfer requirements must be addressed for the particular service; using a provider does not by itself establish compliance.

Retention and security

We retain records for the active service and for as long as needed for outstanding obligations, disputes and applicable record-keeping requirements. Different records have different retention needs; there is no automatic promise that closing a browser or cancelling a plan deletes all data. Contact us to request deletion or ask which records must be retained.

The service uses authentication, access controls and encrypted connections. We aim to limit access to people and providers who need it. No system can guarantee complete security. Client-level permissions, backups and provider settings must also be maintained correctly.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to processing, withdraw consent, and complain to the relevant data-protection authority. We may need proportionate identity verification and may have lawful reasons to retain some information. We explain the outcome and respond within the applicable legal time limit.

Use Your data & privacy requests or email us. You can also raise a complaint with your applicable regulator, such as the UK Information Commissioner or Australian Information Commissioner, where their rules apply.

Cookies, emails and children

See Cookies & privacy settings to allow or reject optional measurement. Essential sign-in storage is separate. Ask us to stop optional follow-up emails by replying or emailing our contact address; necessary service, security and billing messages are distinct.

Our service is intended for adults acting for businesses, not children. We do not request dates of birth as part of routine enquiries. If you believe a child has supplied personal information, contact us so we can assess and address it.

Changes

We update this notice when our practices change and show the date above. Material changes are communicated where required. Check the notice before providing new information.