Privacy Policy

Last updated: 16 May 2026

1. Introduction

This Privacy Policy explains how woti Ltd ("woti", "we", "us", or "our") collects, uses, stores, and protects your personal data when you visit our website at woti.co (the "Website") or interact with our services.

We are committed to protecting your privacy and handling your data in an open and transparent manner. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal data is:

3. What Data We Collect

We collect the following types of personal data:

3.1 Data you provide directly

  • Contact information: When you submit our early access form, we collect your email address and, optionally, your company name.
  • Communications: If you contact us by email, we retain the content of your correspondence.

3.2 Data collected automatically

  • Website analytics (Plausible): On our marketing website we use Plausible Analytics, a privacy-focused analytics service that does not use cookies and does not collect personal data. Plausible collects aggregate, anonymised data about page views, referral sources, browser type, and country of origin. No individual visitors are identified.
  • Product analytics (PostHog): Within the Skiller-Plankton product — including the public shared-plan view described in section 11 — we use PostHog to understand feature usage, page views, and errors. PostHog is hosted in the European Union (AWS, Frankfurt). For signed-in product users this forms part of providing the service. For visitors viewing a shared plan without an account, PostHog runs only after consent is given via the cookie banner.

3.3 What we do not do

Our marketing website does not use cookies for tracking. Within the product, analytics cookies and storage are only ever set with your consent, or as part of providing the service to signed-in users. We do not use any third-party advertising or remarketing services, and we do not sell your personal data.

4. How We Use Your Data

We use the personal data we collect for the following purposes:

  • To respond to your enquiry: When you request early access or contact us, we use your email to respond and provide information about woti.
  • To improve our website and product: We use analytics data to understand how visitors use our website and how users interact with the Skiller-Plankton product, so we can improve their content, structure, and features.
  • To comply with legal obligations: We may process your data where required by law.

5. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

  • Consent (Article 6(1)(a)): When you voluntarily submit your email address through our early access form, you consent to us processing that data to contact you about woti. When you view a shared plan without an account, product analytics run only if you accept them via the cookie banner.
  • Legitimate interests (Article 6(1)(f)): We have a legitimate interest in understanding how our website is used (via anonymised analytics), in providing and improving the Skiller-Plankton product for signed-in users, and in responding to enquiries.

6. Data Sharing

We do not sell your personal data. We may share your data with the following categories of recipients, each of whom processes data on our behalf under a data processing agreement:

6.1 Marketing website

  • Customer relationship management (Attio): Early-access enquiries submitted through our website are stored in Attio, our CRM. Attio processes your email address and any company name you provide on our behalf. Attio is hosted in the European Union.
  • Website analytics (Plausible): Plausible Analytics processes only anonymised, aggregate data. No personal data is shared with Plausible.

6.2 Skiller-Plankton product

  • Product analytics (PostHog): PostHog processes product usage data on our behalf so we can understand and improve the product. PostHog is hosted in the European Union (AWS, Frankfurt).

6.3 All surfaces

  • Legal requirements: We may disclose your data if required by law, regulation, or legal process.

7. International Transfers

Our main analytics and CRM processors — Plausible, PostHog, and Attio — host data within the European Union. Personal data processed through these services therefore stays within the UK and EU.

Where any processor processes data outside the UK and EU, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or a UK International Data Transfer Agreement, to protect your personal data.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Early access submissions: We retain your email address and company name for as long as our early access programme is active, or until you request deletion.
  • Email correspondence: We retain email communications for up to 24 months after the last interaction.
  • Website analytics: Plausible retains anonymised analytics data indefinitely. This data cannot be used to identify individuals.
  • Product analytics: PostHog usage data is retained in line with our PostHog configuration and reviewed periodically. It is used only to understand and improve the product.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can request that we correct inaccurate or incomplete data.
  • Right to erasure: You can request that we delete your personal data where there is no compelling reason for us to continue processing it.
  • Right to restrict processing: You can request that we limit how we use your data.
  • Right to data portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
  • Right to object: You can object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us at privacy@woti.co. We will respond to your request within one month.

10. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

11. Viewing a Shared Plan

Skiller-Plankton lets users share a read-only view of a plan via a link. If you open such a link (a URL of the form /s/…), you can view the plan without creating an account or signing in.

  • No account needed: We do not ask you to register or to provide personal data in order to view a shared plan.
  • Analytics are consent-gated: When you open a shared plan, we show a cookie consent banner. Product analytics (PostHog) only run if you accept. If you decline, no analytics cookies or storage are set.
  • Your choice is remembered: Your consent preference is stored locally in your browser so we do not ask again on every visit. You can change it by clearing your browser storage for this site.
  • The plan content: The plan you view is provided by the woti customer who created the share link. Any personal data shown within the plan is processed by that customer as the data controller.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: