Website privacy notice

Who is responsible for your information

RPO Global Ltd, trading as WeMatter, is the controller responsible for the personal information described in this notice. Our company number is 04618062.

Our registered office is Water Meadow Cottage, 94 Main Street, Newtown Linford, Leicestershire, England, LE6 0AF.

For privacy questions or requests about your information, email luke@wematter.app.

Information we collect

When you submit an enquiry, we collect:

• Your name and work email address.
• Your organisation, role and organisation size.

We also receive information you choose to share in follow-up correspondence. Our website hosting, security and diagnostic services process technical information to operate the website, prevent misuse and investigate errors. This can include IP addresses, browser information, request identifiers and error details.

How we use your information

We use enquiry details to respond to you, understand your organisation’s needs, discuss whether WeMatter is a suitable fit and follow up on the potential relationship. We track those conversations in an internal Slack pipeline tracker.

Submitting an enquiry does not subscribe you to a mailing list or other marketing communications. That requires your separate, specific approval.

We use technical information to protect the enquiry form from abuse, keep the website working and diagnose failures.

Our legal basis

• Responding to and following up enquiries: our legitimate interests in responding to people who contact us about working together.
• Website security and diagnostics: our legitimate interests in protecting the website from abuse, investigating errors and keeping it working.
• Marketing communications: your consent, obtained separately. Submitting an enquiry does not subscribe you to marketing.

Who handles your information

Access to the enquiry channel and pipeline tracker is limited to our internal team. We use the following services to run the website and handle enquiries:

• Slack receives enquiry notifications and holds our relationship pipeline tracker.
• Google Workspace handles our follow-up email correspondence.
• Cloudflare Turnstile provides the enquiry form’s anti-abuse security check.
• Railway hosts the website.
• Sentry and Better Stack help us diagnose errors and monitor the website’s operation. Access to our accounts is restricted to the person responsible for operating the website.

How long we keep your information

Different records have different retention periods. Removing a pipeline entry does not automatically delete the original enquiry or follow-up emails.

• Original Slack enquiry messages: the enquiry channel is configured to delete messages automatically after six months, measured from when each message was posted.
• Pipeline entries: we remove the person’s details when the initial discussion concludes without progressing a partnership. If neither side has been in contact for six months, we treat the enquiry as concluded and remove its pipeline entry.
• Follow-up emails for unsuccessful enquiries: we will review these annually and delete correspondence no longer needed for a genuine business or legal purpose. This is a review process, not a fixed expiry for every email.
• Railway hosting logs: logs, including IP addresses, are kept for 30 days.
• Sentry error reports: the current Team plan provides 90-day retention for error events.
• Better Stack: logs are retained for three days and metrics for 30 days. We do not export these logs to a separate archive.

Cookies, browser storage and analytics

We do not currently use website visitor analytics or advertising tracking. This is separate from the security checks and error diagnostics described above.

We do not set first-party cookies for signed-out website visitors. If you use the theme toggle, we save your light or dark preference in your browser’s local storage. This is the only browser storage we use on the public website.

Cloudflare Turnstile protects the enquiry form from bots. It collects technical information including your IP address, TLS fingerprint, browser user-agent and the site key with its associated origin. See Cloudflare’s Turnstile privacy addendum for details of this processing.

Sentry sends error reports only. We do not enable session replay or performance tracing, and its default collection of personal information is disabled.

How we protect your information

The website is served over HTTPS. Access to our enquiry channels and diagnostic tools is restricted to authorised personnel.

International processing

Some of our service providers process information outside the United Kingdom, including the United States. Our Sentry account stores data in the United States.

Our providers publish data-processing terms that include UK international-transfer safeguards. We are completing our review of these arrangements and will update this notice when that review is complete. For details of the safeguards that apply, email luke@wematter.app.

Your rights and how to contact us

Depending on the circumstances and applicable law, you may have rights to access, correct or delete your personal information, restrict its use, object to processing or receive a portable copy. Where we rely on consent, you can withdraw it without affecting the lawfulness of processing before withdrawal.

Email luke@wematter.app to ask a question or exercise your rights. You can also complain to the UK’s Information Commissioner’s Office.

Changes to this notice

We will update this notice when our website privacy practices change. The effective date at the top shows when this version took effect.