This page is written to describe Millwonder’s current practices and legal position clearly. It should be read with any contract that applies to a specific service or project.
1. Scope and controller
This policy applies to millwonder.com, business enquiries, supplier and client relationships, contributor communications, recruitment and other interactions in which a Millwonder entity determines how personal data is used. The controller is the Millwonder entity that operates the relevant service or enters into a relationship with you. For controller or representative details applicable to your country, email privacy@millwonder.com.
2. Personal data we collect
We may process identity and contact data; employer, role and professional information; correspondence and project requirements; contractual, billing and transaction records; recruitment information; contributor qualifications and project records; and limited technical data supplied by a browser or hosting provider, such as IP address, device type, access time and requested page. This website does not contain an online enquiry form and does not currently use advertising or analytics trackers.
3. Sources of personal data
We receive data directly from you, your employer or organisation, authorised project partners, recruitment and contributor platforms, service providers, public professional sources and security or hosting systems. Where clients provide data for AI projects, the relevant agreement defines whether Millwonder acts as controller or processor.
4. Purposes and legal bases
We process data to answer enquiries; evaluate and deliver projects; administer contracts, payments and contributor programmes; recruit personnel; secure systems; prevent fraud; maintain records; comply with law; establish or defend legal claims; and improve operations. Depending on the context, the legal basis is performance of a contract, steps requested before contract, compliance with a legal obligation, legitimate interests that are not overridden by individual rights, or consent. Consent may be withdrawn at any time without affecting earlier lawful processing.
5. Special-category and project data
We do not intentionally request sensitive personal data through this website. Some authorised AI data projects may involve biometric, health or other protected data. Such processing occurs only under a specific contract, documented instructions, an appropriate legal condition and enhanced access, retention and security controls.
6. Disclosure and processors
Data may be disclosed on a need-to-know basis to Millwonder group companies, clients, approved contributors, cloud and communications providers, professional advisers, auditors, payment providers and public authorities. Providers are subject to contractual confidentiality, security and data-processing requirements. We do not sell personal data.
7. International transfers
Millwonder operates internationally. When protected data is transferred across borders, we use an available lawful mechanism, which may include an adequacy decision, standard contractual clauses, recognised certifications or another safeguard permitted by applicable law. You may request information about the relevant safeguard.
8. Retention and security
We retain data only for the period reasonably required for the stated purpose, contract, dispute or legal obligation. Retention depends on the record type, sensitivity and limitation period. We use proportionate organisational and technical measures including role-based access, confidentiality controls, secure transfer, supplier review, logging, backup and incident response. No system can be guaranteed completely secure.
9. Your rights
Subject to local law, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; and complain to the competent supervisory authority. We may verify identity and may refuse or limit requests where the law permits. Send requests to privacy@millwonder.com.
10. Children, changes and contact
This corporate website is not directed to children and we do not knowingly collect children’s data through it. We may update this policy when services, practices or law change and will publish the revised date. Privacy questions and requests should be sent to privacy@millwonder.com.