Privacy Policy
Privacy Policy
Certainly Stuff Ltd
Company Number 14386974
Old Pockford, Vann Lane, Chiddingfold, Godalming, GU8 4XU, United Kingdom
Last Updated: 9 July 2025
INTRODUCTION
Important information and who we are
Welcome to Certainly Stuff Ltd’s Privacy and Data Protection Policy (“Privacy Policy”).
Certainly Stuff Ltd (“we”, “us”, or “our”) is committed to protecting and respecting your privacy and Personal Data in compliance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all other mandatory laws and regulations of the United Kingdom.
This Privacy Policy explains how we collect, process and keep your data safe when you visit getwildfire.gg (the “Site”) or otherwise interact with us outside the Spark platform. For the policy covering the Spark SaaS application, please see https://spark.getwildfire.gg/privacy.
YOUR DATA CONTROLLER
Certainly Stuff Ltd is the Data Controller responsible for your Personal Data. Any enquiries should be sent to info@getwildfire.gg or by post to the address above. You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) but we would appreciate the opportunity to address your concerns first.
LEGAL BASIS FOR DATA COLLECTION
Types of data / Privacy policy scope
“Personal Data” means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of Personal Data about you; not all of these categories will necessarily be collected from every visitor:
Category | Examples |
|---|---|
Profile/Identity Data | First name, last name, title, date of birth |
Contact Data | Email address, mobile phone number (optional), postal address |
Marketing & Communications Data | Your preferences in receiving marketing or content updates |
Technical & Usage Data | IP address, browser type, device information, referring URLs |
We do not collect Special Category Data or information about criminal convictions and offences on this Site.
Legal bases we rely on
Legal Basis | When we use it |
|---|---|
Consent | When you tick a box to subscribe to newsletters, opt-in to SMS/WhatsApp notifications or accept cookies beyond those strictly necessary |
Contractual Obligations | When processing your data is necessary to perform a contract with you (e.g. supplying paid services) |
Legal Compliance | Where we are legally obliged to process data (e.g. fraud prevention) |
Legitimate Interest | For running and improving our business in ways that do not materially impact your rights (e.g. basic analytics, remembering preferences) |
HOW WE USE YOUR PERSONAL DATA
Activity | Type of data | Legal basis |
|---|---|---|
Brochure & content downloads | Profile/Identity, Contact | Consent |
Competitions or promotions | Profile/Identity, Contact, Marketing | Consent / Legitimate Interest |
Customer support queries | Profile/Identity, Contact | Legitimate Interest |
Mobile messaging notifications (if you opt in) | Contact (phone number), Technical (verification metadata) | Consent |
Marketing emails | Contact, Marketing | Consent / Legitimate Interest |
Analytics & site optimisation | Technical & Usage | Legitimate Interest |
Change of purpose
We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another compatible purpose. If we need to use your Personal Data for an unrelated purpose, we will notify you and explain the legal basis.
MOBILE MESSAGING (SMS & WHATSAPP) NOTIFICATIONS
Although primary SMS/WhatsApp functionality resides within Spark, you may also choose—via forms on this Site—to receive Wildfire campaign alerts by mobile message. When you do:
Opt-In & Verification — You provide your mobile number, complete a CAPTCHA, and verify ownership by entering a one-time code (valid for 10 minutes). The code is stored only as a cryptographic hash.
Types of Messages — Transactional alerts about campaign launches or milestones; essential service notices. We will not send marketing content by SMS/WhatsApp unless you separately opt-in.
Legal Basis — Processing relies on your explicit consent under Article 6(1)(a) UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR).
Opt-Out — Disable mobile messaging via the unsubscribe link in any message, reply STOP, or email us. We will honour opt-outs within 24 hours.
Third-Party Messaging Provider — Messages are delivered by Twilio Inc. Your phone number and message metadata are shared with Twilio solely for this purpose under Standard Contractual Clauses.
Fees — Message and data rates may apply as imposed by your carrier.
Retention & Security — Verified numbers are stored encrypted at rest and deleted or anonymised within 30 days of opt-out or account deletion.
YOUR RIGHTS
You have rights under data-protection law: to be informed, access, rectify, erase, restrict, object, and port your data. To exercise any right, email info@getwildfire.gg. We will respond within one month.
HOW WE PROTECT YOUR DATA
We employ appropriate technical and organisational measures, including encryption at rest, least-privilege access controls, and regular penetration testing. No method of transmission is 100 % secure; if you believe your interaction with us is no longer secure, contact us immediately.
THIRD-PARTY LINKS & SERVICES
This Site may include links to third-party websites, plug-ins and applications. Clicking those links may allow third parties to collect data about you. We do not control those sites.
Service providers we use on this Site
Provider | Purpose | Location/Data transfer mechanism |
|---|---|---|
Google Analytics | Website analytics | EU → US, SCCs |
Vercel | Hosting infrastructure | EU & US, SCCs |
Hotjar | UX analytics (heatmaps, recordings) | EU, SCCs |
Twilio | SMS/WhatsApp delivery (only if opted-in) | US, SCCs |
INTERNATIONAL TRANSFERS
Your data may be processed outside the UK/EEA. We rely on adequacy decisions, Standard Contractual Clauses or other lawful safeguards.
HOW LONG WE RETAIN YOUR DATA
We retain Personal Data only as long as necessary for the purposes described or as required by law. Where possible, data is anonymised or deleted sooner.
AGE LIMIT
The Site is not intended for children under 18 and we do not knowingly collect data relating to children.
NOTIFICATION OF CHANGES
We keep this Privacy Policy under review; updates will be posted here with a new “Last Updated” date. Continued use of the Site constitutes acceptance of the revised terms.
CONTACT
Certainly Stuff Ltd — info@getwildfire.gg — Old Pockford, Vann Lane, Chiddingfold, Godalming, GU8 4XU, United Kingdom
