Privacy Policy
Effective date: 1 January 2026. GB WP 1 Ltd ("we", "us", "our") respects your privacy and is committed to protecting personal data. This Privacy Policy explains what information we collect, how we use it, the legal grounds for processing, and the choices and rights available to you. We provide publishing, editing, and production services from our office in London. If you have questions about this policy or our data practices, please contact us at [email protected] or +44 20 7946 0958.
1. Information we collect and how
We collect personal data you provide directly when you contact us, request an appraisal, or submit a form. Typical items include name, email address, telephone number, project details, and billing information. For manuscript appraisals we may request a sample chapter or extract; we provide secure instructions for file transfer when required. We also collect technical data automatically when you visit our website (IP address, browser, device type, pages visited) via cookies and server logs to operate the site and improve performance. When you subscribe to our blog or newsletter you provide an email address and name. Where required for payment transactions we use third-party payment processors to collect and handle card details; GB WP 1 does not store full card numbers on our servers. All data collected is limited to what is necessary for the specific purpose and retained in accordance with our retention schedule.
2. Purposes, legal basis, and sharing
We use personal data to provide and administer our services, communicate about projects, prepare quotes, and deliver files. When you ask for a manuscript appraisal we process the minimum information to review the excerpt and prepare a proposal. Our legal basis for processing includes performance of a contract, legitimate interests (running and improving our business, billing, and fraud prevention), and consent where you sign up for newsletters. We may share data with trusted third parties when necessary to provide services, for example production partners, print vendors, or technical platforms for file transfer. We require those partners to use data only for the purpose of providing services to GB WP 1 and to maintain adequate security. We will not sell your personal data. We may also disclose data when required by law, to enforce our legal rights, or in response to lawful public authority requests.
3. Cookies, analytics, and retention
Our website uses essential cookies required for security and site operation and optional analytic cookies to help us understand traffic patterns. You can accept or reject non-essential cookies using the cookie banner. Analytics data is aggregated and used to improve site navigation and performance; it does not identify individual users. We retain contact and project records for project duration plus a standard archival period of seven years to satisfy contractual and accounting obligations; shorter retention may apply for marketing lists where consent is the legal basis. When data retention ends we securely delete or anonymise personal data. For specific retention periods related to a project or request please contact our Data Protection Representative at [email protected] and we will provide details relevant to your data.
4. Your rights and how to exercise them
Depending on your jurisdiction you may have rights including access to personal data we hold about you, correction of inaccurate information, restriction or objection to certain processing, portability, and erasure. Where processing is based on consent you can withdraw consent at any time, though withdrawal does not affect processing already completed while consent was in place. To exercise rights please contact us at [email protected] or by post at GB WP 1 Ltd, 45 Great Portland Street, London W1W 7LT, United Kingdom. We will respond to verifiable requests without undue delay and in line with applicable law. If we refuse a request we will explain the reason and provide information about complaint options, including the supervisory authority in the United Kingdom (Information Commissioner's Office) for UK residents.
5. Security, transfers and children
We use administrative, technical, and physical controls to protect personal data against unauthorised access, loss, or misuse. Access to project data is restricted to staff and partners who need it to perform services. Where we transfer data to subprocessors outside the UK or EEA we will ensure appropriate safeguards such as standard contractual clauses or other lawful mechanisms. Our services are not directed at children under 13 and we do not knowingly collect data from children; if notified that a child under the applicable age has provided personal data we will take steps to delete it. For security incidents that materially affect personal data we will notify affected individuals and authorities as required by law.
6. Changes and contact
We may update this Privacy Policy periodically; the effective date at the top indicates the most recent version. Significant changes will be highlighted to users where feasible. If you have questions about this policy, wish to lodge a request, or want a copy of the data we hold about you, please contact our Data Protection Representative by email at [email protected] or by post to GB WP 1 Ltd, 45 Great Portland Street, London W1W 7LT, United Kingdom. For urgent matters you can call +44 20 7946 0958 during office hours. We aim to handle enquiries promptly and provide clear guidance about any next steps.