Willows Group Ltd · Legal
Privacy policy
This notice explains personal information handled through the Willows Group website and your rights under UK data protection law, including the UK GDPR and Data Protection Act 2018, as amended.
Last updated: 27 October 2026
1. Who is responsible
Willows Group Ltd · Company number 09490005
Registered office: 184 Coleman Road, Leicester, England, LE5 4LJ.
Email: hello@willowsgroup.uk.
Willows Group Ltd is the controller for enquiries submitted through this website. This notice does not cover patient records or services delivered by individual portfolio companies; please consult their separate privacy notices.
2. Information we collect
- Enquiry details: your name, email address, organisation (if supplied), selected topic and message.
- Technical details accompanying an enquiry: IP address, browser/device user-agent and submission time, used for security and abuse prevention.
- Correspondence you send when following up an enquiry or exercising your rights.
- Website delivery and error information that may be handled by our hosting and technical providers, such as request details and diagnostic logs.
Please do not send medical records, patient-identifiable information or other sensitive personal information through this form. It is intended for business enquiries, not healthcare or emergencies.
3. Why we use it and our lawful bases
- Responding to and managing enquiries: our legitimate interests in communicating with people who contact us and administering the Group’s business. Where your enquiry concerns entering a contract with you, processing may instead be necessary to take steps at your request before that contract.
- Website security and abuse prevention: our legitimate interests in keeping the website and enquiry service secure, including limiting repeated submissions.
- Legal obligations: where keeping or disclosing information is required by applicable law.
We balance legitimate interests against your rights and expectations. Sending an enquiry does not subscribe you to marketing. We do not use the enquiry form for automated decision-making or profiling with legal or similarly significant effects.
4. Who may receive information
Information may be accessed by those responsible for handling your enquiry and by service providers supporting website hosting, secure enquiry storage and technical operations, including Lovable Cloud. Relevant professional advisers or public authorities may receive information where necessary or required by law.
Where your enquiry concerns a portfolio company, any referral should be limited to information needed to address it and an appropriate lawful basis. We do not sell enquiry information.
The website loads fonts from Google Fonts and media from asset-hosting services. Those providers receive technical request information, such as your IP address, when your browser connects to them. External company and LinkedIn links take you to websites governed by their own notices.
5. International processing
Some technical providers may process information outside the UK. Where a restricted international transfer occurs, UK data protection law requires an appropriate transfer mechanism, such as adequacy regulations or approved contractual safeguards. To ask about the providers, processing locations or safeguards applicable to your information, contact us using the details above.
6. Keeping information
Retention depends on the purpose of the enquiry, whether it leads to an ongoing business relationship and any applicable legal, security or record-keeping requirements. Information should be kept only for as long as necessary for those purposes, then deleted or anonymised. Contact us for the retention arrangements applicable to your enquiry or to request deletion.
The website does not automatically delete enquiries after a fixed period; deletion requests and retention reviews require handling by the Group. Provider logs and backups have separate retention arrangements.
7. Your data protection rights
Depending on the circumstances, you have rights to:
- Access your personal information and receive a copy.
- Correct inaccurate or incomplete information.
- Request erasure or restriction of processing.
- Object to processing based on legitimate interests, and to direct marketing at any time.
- Receive portable data where the legal conditions apply.
- Withdraw consent where processing relies on it, without affecting earlier lawful processing.
Email hello@willowsgroup.uk with your request. We may need proportionate information to confirm your identity. We normally respond within one month; the law permits extensions for complex or multiple requests, and we will explain any extension or refusal.
8. Complaints
Please contact us if you have concerns about your information. You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
9. Cookies and updates
See our cookie policy for browser storage information. We may update this notice as the website or processing changes; the latest revision date appears above.