Two groups of people: visitors, and clients who send recordings. This page says what data WORDR holds, why, who sees it, how long it's kept, and what you can do about it.

1. 01Controller

   Carlo Albertoli, trading as WORDR, a sole trader at 25 Middle Way, Lewes, East Sussex, BN7 1NJ, United Kingdom. Email: info@wordr.org.

   WORDR decides what happens with enquiries, client records and billing data. That makes it the controller.

2. 02Processor

   For what's in the recordings, the client is in charge — they decided what to record and why. WORDR is the processor: it handles the content only to deliver the documents, on the terms in clause 13 of the Terms.

   If your voice is in a recording and you're not the client, contact the client first. You can also write to WORDR, which will pass your request on.

1. 03Website visitors

   No cookies of our own. No analytics. No advertising.

   Cloudflare delivers the site. Your IP address and basic request details go to Cloudflare so it can serve the pages and keep them safe. It may set a short-lived security cookie for that purpose.

   The typefaces come from Google Fonts, so your IP address reaches Google when a page loads.

   Basis: legitimate interests — running and securing the website.

2. 04People who write

   Your name, email address and whatever you write. Used to reply, arrange a free sample or prepare a quote.

   Basis: steps taken at your request before a contract, and legitimate interests — answering enquiries.

3. 05Clients

   Name, contact details, where the recording is held, your instructions on structure, the fee, payment status and correspondence.

   Basis: performing the contract, and legal obligation for accounting and tax records.

4. 06Recordings and documents

   Audio and video files, the transcripts made from them, and the structured documents delivered. A recording may contain personal data of any kind, including sensitive categories such as health or beliefs. The client is responsible for having a lawful basis to send it (clause 06 of the Terms).

   WORDR does not use this content for training, analytics or any purpose other than the job.

5. 07Automated processing and human review

   Whisper transcribes. Claude structures. A person reviews everything before it goes out. No decision with legal or similarly significant effect on anyone is made by a machine.

1. 08Recipients

   WORDR uses the providers listed below. It sells no data and shares it with no one else, unless the law says otherwise.

   CloudflareWebsite delivery, DNS and security.Receives visitors' IP addresses and request details.

   GoogleGoogle Drive and Google Sheets, where client and job records are kept. Google Fonts, which supplies the website's typefaces.Receives record data (names, contact details, recording location, fee and payment status) and visitors' IP addresses.

   Unlimited Web Hosting UK LimitedThe mailbox for info@wordr.org.Receives all email, including recordings sent as attachments.

   OpenAIWhisper transcription.Receives the audio. OpenAI states that data sent to its API is not used to train its models.

   AnthropicClaude, which structures the transcript.Receives the transcript text. Anthropic's terms provide for inputs and outputs to be deleted within 30 days.

   These providers act as sub-processors for client content and as processors for WORDR's own records.

2. 09Transfers abroad

   Some of these providers process data outside the UK and the EEA. The transfer relies on safeguards in their data processing terms — standard contractual clauses with the UK Addendum.

   Data from the EU to WORDR in the UK relies on the European Commission's adequacy decision, renewed 19/12/25.

1. 10Retention
   Recordings, transcripts, documentsDeleted once the client approves the job, including the copies in the emails in which they arrived.

   Client, billing and job recordsSix years from the end of the tax year in which the job finished.

   Enquiries that do not become a job12 months after the last message.

   Providers apply their own retention to what they receive, as described in clause 08.

1. 11Rights

   You can ask for a copy of the personal data WORDR holds about you, correct it, delete it, restrict its use, get it in a portable format, or stop a use based on legitimate interests. Write to info@wordr.org with Data protection in the subject.

2. 12Complaints

   Please complain to WORDR first, at info@wordr.org. WORDR will acknowledge your complaint within 30 days and respond without undue delay.

   You may also complain to the regulator. In the United Kingdom that is the ICO, at ico.org.uk. If you live in the EU or EEA you may complain to the authority in your country. In Italy it is the Garante per la protezione dei dati personali, Piazza Venezia n. 11, 00187 Roma, protocollo@gpdp.it.

1. 13Security

   Files are stored with access restricted to WORDR. Email is email — a message can be read in transit or at either end.

2. 14Changes

   This notice was last updated on 15/10/26. A changed version will carry a new date.