Privacy policy
Last updated 12 October 2026.
This policy covers the waterpalaver.com website and the support mailbox behind it. Each of our products has its own policy, because each one handles data differently.
Who we are
Water Palaver Ltd is the data controller for everything described here. We are registered in England and Wales, company number 17267842, at Station House Station Approach, East Horsley, Leatherhead, Surrey, United Kingdom, KT24 6QX.
For anything about your data, contact our data protection address.
What this policy does not cover
Our products collect and store data of their own, under their own policies:
Links from this site to anywhere else, including the product sites above, take you somewhere we do not control. This policy stops at our boundary.
What we collect
When you use the support form
We collect your name, email address, the topic you chose, your subject line, your message, and the setup details you choose to give us. All of it arrives by email and sits in our support mailbox.
The form includes a hidden field that is invisible to you and never filled in by a person. It exists to catch automated submissions, and we discard anything that fills it in.
When you simply read the site
We set no cookies and run no analytics. There is no tracking script on any page here, and nothing is loaded from a third party.
Our web host keeps standard server logs, which include your IP address, the page requested, the time, and your browser's user agent. We do not use these for anything except investigating faults and abuse.
Why we are allowed to hold it
| Answering your support message | Legitimate interests: you asked us a question and expect an answer. Where your message concerns a contract with us, we handle it to perform that contract. |
|---|---|
| Server logs | Legitimate interests: keeping the site working and defending it against abuse. |
We do not send marketing email and have no mailing list, so we never ask you to consent to one.
Who else sees it
- Krystal Hosting Ltd, a UK company, hosts this website and our mailbox. Your message passes through and rests on their servers.
- Our accountant and professional advisers, but only where a message concerns billing or a legal matter, and only the part that does.
We do not sell personal data, and we do not share it for anyone else's marketing. We would only hand it to a public authority where the law required it.
Where it goes
Our hosting and mail are in the United Kingdom. We do not routinely transfer your data outside the UK. If that changes, we will name the safeguard used before it happens.
How long we keep it
| Support correspondence | 24 months after the conversation ends, then deleted. |
|---|---|
| Correspondence about a purchase or invoice | Six full financial years, because tax law requires it. |
| Server logs | As long as our host retains them, currently a matter of weeks. |
Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or hand it to someone else in a portable form. You can also object to our processing it on the basis of legitimate interests.
Write to our data protection address. We will answer within one month. We do not charge for this, and we will not ask you for proof of identity beyond what we need to be sure we are talking to the right person.
If we get it wrong, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first, so we can fix it.
Changes
When this policy changes we update the date at the top. We keep no archive of previous versions, so if a change matters to you, keep your own copy.