Last updated: 10 June 2026.
This policy explains what WindDown does with your personal data. We have kept it short and in plain English, because nobody reads privacy policies for fun, and we would rather you actually read this one.
Who we are
winddownhq.com is operated by Murphy Street Partners Limited, a company registered in England and Wales (company number [COMPANY NUMBER], registered office [REGISTERED OFFICE]). We are the data controller for the personal data described here. For anything privacy-related, email privacy@winddownhq.com.
The short version
- We collect what you give us: your name, email address, company number and your answers to the route check.
- We use it to give you your results, deliver what you have paid for, and keep the site running. We do not sell it to anyone.
- Payments go through Stripe. We never see or store your full card details.
- Leads are deleted after 24 months. Customer records are kept for 7 years, because tax law says so, not because we are sentimental.
- You can ask us to access, correct or delete your data at any time.
What we collect
Details you give us
- Contact details — your name and email address, when you ask for your route-check results or buy the Guided Wind-Down.
- Company number — which we use to look up your company's public record at Companies House. That register is public; we are just saving you the typing.
- Questionnaire answers — your responses in the route check, such as whether the company is solvent, has traded recently, or holds more than £25,000. These describe your company's situation, but tied to your name they count as your personal data, so we treat them with the same care.
Payment information
Payments are handled by Stripe. We receive confirmation that you have paid and basic transaction details; your card number goes to Stripe, not to us, and we never store it.
Technical data
Our servers keep standard logs (IP address, browser type, pages requested, timestamps) for security and debugging. We use lightweight, aggregated analytics that do not use cookies, do not track you across the web and do not build profiles. Your wind-down documents are generated in your browser, not stored on our servers.
Why we use your data, and the lawful bases
UK GDPR requires a lawful basis for each use. Here are ours:
| What we do | Data involved | Lawful basis |
| Run the free route check and email you your results and plan | Name, email, company number, questionnaire answers | Legitimate interests — you asked for the results |
| Provide the Guided Wind-Down you have purchased | Contact details, company details, payment record | Contract |
| Keep accounting and tax records | Customer and transaction records | Legal obligation |
| Occasional follow-up emails about your wind-down route (opt out any time) | Email address | Legitimate interests; any broader marketing only with your consent |
| Site security, debugging and abuse prevention | Server logs | Legitimate interests |
The route check produces an automated recommendation, but it is guidance, not a decision with legal effect. You stay firmly in charge.
Who we share it with
We use a small number of service providers (processors), each bound by a data processing agreement:
- Vercel — hosts the website and our server infrastructure (United States).
- Stripe — processes payments.
- Our email provider (currently Resend) — sends your results and transactional emails.
If you ask us to refer you to our licensed Insolvency Practitioner partner for an MVL, we will pass your details on — and we will tell you when we are doing it. Beyond that, we share personal data only where the law requires it. We do not sell or rent it to anyone, ever.
International transfers
Vercel hosts our infrastructure in the United States, and some other providers may process data there too. Where data leaves the UK, the transfer is protected by safeguards approved under UK GDPR — Standard Contractual Clauses with the UK International Data Transfer Addendum, or the UK–US Data Bridge where the provider is certified.
How long we keep it
- Leads (route-check users who do not buy): 24 months from our last contact, then deleted.
- Customers: 7 years, to meet HMRC record-keeping requirements for tax and accounting records.
- Server logs: rotated automatically and kept for no more than 90 days.
Your rights
Under UK GDPR you can ask us to: access the data we hold about you; correct it; delete it; restrict or object to how we use it; give it to you in a portable format; and withdraw any consent you have given. Email privacy@winddownhq.com and we will respond within one month, free of charge. We may ask you to confirm your identity first, which is for your protection rather than ours.
Cookies
At launch we use essential cookies only — the kind the site needs to function. No advertising cookies, no third-party trackers, and therefore no tedious consent banner. If that ever changes, we will update this policy and ask you before setting anything non-essential.
Complaints
If you are unhappy with how we have handled your data, we would genuinely like the chance to put it right first — email privacy@winddownhq.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
If we change this policy, we will post the new version here with an updated date, and flag anything significant to customers by email.
And if you landed on this page before trying the tool: the free route check at /check takes about three minutes — and now you know exactly what happens to your answers.