01About this policy
This Privacy Policy explains how Wingman collects and uses personal information when you visit the Wingman website at wingman-uk.com and when you join the Wingman early-access waitlist or register interest as a venue partner.
It covers the website and its sign-up form only. The Wingman mobile app is not yet available. When the app launches, it will come with its own privacy notice explaining the information the app uses, and we will point you to that notice before you create an account.
In this policy, “Wingman”, “we”, “us” and “our” mean the company named in section 2. “You” means anyone who visits the website or submits the sign-up form.
What is active now and what is planned
Some of the processing described in this policy will start only when the related feature goes live. Wherever that applies, the text is marked Planned . We will update this policy if any planned feature changes before launch.
- Active now
- Delivering the website, including the technical information received by our hosting provider (section 7); storing waitlist sign-ups, venue enquiries and Contact page messages; keeping consent records; sending the confirmation email and passing enquiries to a Wingman mailbox; and the cookie banner with its record of your choice.
- Planned
- Sending launch emails and news (only to people who have confirmed they want them), website analytics, Meta Pixel, TikTok Pixel and advertising conversion tracking.
02Who we are and how to contact us
The website and waitlist are operated by Nexus Equity Management Ltd, a company registered in England and Wales under company number 17130276, whose registered office is at 63 West Gate, Mansfield, England, NG18 1RR.
That company is the data controller for the personal information described in this policy. This means we decide how and why your information is used and we are responsible for looking after it.
- Privacy contact
- hello@wingman-uk.com
- Postal address
- Nexus Equity Management Ltd, 63 West Gate, Mansfield, England, NG18 1RR
03The information we collect
Information you give us
The website has three forms. Each asks only for what is listed here.
- Waitlist (home page): your first name and email address (both required); your town or city, typed freely (optional; the form suggests our launch cities); what you would use Wingman for, chosen from special occasions, days out, gifts and flowers, weekend breaks, and restaurants and nightlife (optional); that you agree to the Early Access & Waitlist Terms and have read this policy (required); and whether you want news, launch updates and offers by email (optional, not ticked in advance).
- Contact page: your name, your email address, what your message is about (chosen from a list) and the message itself.
- For venues page: your business name, your name, your role (optional), your work email address, a phone number (optional), the type of business, your town or city, your website (optional), a message (optional), and your confirmation that we may contact you about your enquiry.
- If you email us: your email address, the content of your message and anything you choose to include in it.
When you submit the waitlist form we also record the date and time, the page you used it on, whether you agreed to the terms, whether you ticked the box for news and offers, and the version of this policy, the Cookie Policy and the waitlist terms you were shown. Later steps are added to the same record: confirming your address, confirming or withdrawing your choice about news and offers, and removing yourself. This consent record holds no name or email address, so it can be kept to show when and how you gave permission even after your details have been removed.
After you join we send one email asking you to confirm your address (a “double opt-in”). It contains a link to a page with a button, and nothing is confirmed until you press it. If you ticked the box for news and offers, pressing the button also confirms that choice. We have not yet set a separate deadline for a sign-up that is never confirmed; section 10 explains what applies until we do.
Information collected automatically
Whenever you visit a website, your browser shares some technical information with the servers that deliver the page. For the Wingman website this includes:
- your IP address, browser type, device type and operating system;
- the pages and files requested, and the date and time of each request; and
- the address of the page that linked you to us, where your browser provides it.
This information is received by our website hosting provider (see section 7). The website’s typefaces and code libraries are served from the website itself, so no font or code delivery service receives it. We do not use it to identify you personally.
When you submit a form, the forms service also sees your IP address. It uses it only to limit how many submissions one connection can make in a short time, keeps it in memory for about ten minutes, and does not write it to its database or its own logs. The hosting platform’s web request log can also record it, with the address of each page requested, for a short time (section 10).
Information collected by analytics and advertising tools
Planned If you accept analytics or advertising cookies, the tools described in section 6 will also collect:
- identifiers stored in cookies or similar technologies on your device;
- the pages you view, how you arrived at the website, how long you stay and the actions you take, such as starting or completing the sign-up form;
- if you arrived from an advert on Facebook, Instagram or TikTok, information identifying that advert or the click on it; and
- your IP address, browser and device information, which the advertising platforms may combine with information they already hold about you if you use their services.
These tools will not run, and none of this information will be collected through them, unless you accept them.
Information we do not ask for
The website does not ask for payment details, passwords, dates of birth, or information about your partner, your relationship or your dating preferences. Please do not include sensitive information, such as details about your health, religion or sexual orientation, in the sign-up form or in emails to us. If you send us information we have not asked for, we will delete what we do not need.
04How we use your information and our lawful bases
Data protection law requires us to have a lawful basis for each way we use personal information. The table below sets out each purpose and the basis we rely on.
| What we do | Information used | Lawful basis |
|---|---|---|
| Planned Add you to the early-access waitlist and email you about Wingman’s launch, early access and launch-month member prices in your city. | First name, email address, city, consent record. | Consent. You choose to join the list. You can withdraw consent at any time by unsubscribing. |
| Planned Respond to a venue’s registration of interest and discuss a possible partnership. | First name, email address, venue name, city. | Legitimate interests: replying to business enquiries and building venue partnerships. If you trade as a sole trader, also steps you have asked us to take before entering a contract. |
| Reply to emails and requests you send us, including privacy requests. | Contact details and the content of your message. | Legitimate interests: answering people who contact us. For privacy requests, legal obligation. |
| Deliver the website, keep it secure and prevent misuse such as automated or false sign-ups. | Technical information and sign-up details. | Legitimate interests: operating a reliable, secure website. |
| Planned Measure how the website is used so that we can improve it. | Analytics identifiers, page views and actions on the website. | Consent, given through the cookie banner. |
| Planned Measure how well our adverts work, including whether a visit from an advert led to a sign-up (conversion tracking). | Advertising identifiers, advert click information, actions on the website. | Consent, given through the cookie banner. |
| Planned Show Wingman adverts on Facebook, Instagram and TikTok to people who have visited the website (retargeting). | Advertising identifiers and pages viewed. | Consent, given through the cookie banner. |
| Planned Use your email address to find you, or people similar to you, on advertising platforms (audience uploads). | Email address, in an encoded (hashed) form. | Separate consent. We will only do this if you have agreed to it specifically. See section 6. |
| Planned Keep a record of email consents, cookie choices and unsubscribe requests. | Email address, dates, consent wording, cookie choices. | Legal obligation and legitimate interests: showing that we email people and use cookies lawfully, and never contacting someone who has opted out. |
| Comply with the law, respond to lawful requests from authorities, and establish or defend legal claims. | Any of the above, as needed. | Legal obligation and legitimate interests. |
Where we rely on legitimate interests, we have considered your interests and rights and concluded that our use is limited, expected and proportionate. You have the right to object, as explained in section 11. You can ask us for more detail about how we reached that conclusion.
We do not make decisions about you by automated means that have legal or similarly significant effects. If you accept advertising cookies, Meta and TikTok may use the information they receive to decide which adverts to show you, as described in section 6.
05Emails from Wingman
Confirmation email. When you join the waitlist we send one email asking you to confirm your address. It is part of running your sign-up, not marketing.
Planned If you have ticked the box for news, launch updates and offers and pressed the confirm button, we will email you about Wingman only: when the app opens in your city, how to get early access, and launch-month member prices. We do not send news or offers to anyone who has not confirmed. We send launch announcements only to people who have both ticked the box and pressed the confirm button; we do not send them to anyone else. We will not pass your email address to other companies for their own marketing.
Every email we send includes a link to unsubscribe or remove yourself, which works without signing in. “Unsubscribe” stops news and offers and keeps your place on the waitlist. “Remove me” erases your name, email address, town and answers, and keeps only a coded (hashed) identifier of your address so that we do not contact you again by mistake. You can also unsubscribe by emailing hello@wingman-uk.com.
Your choices about emails and your choices about cookies are separate. Accepting cookies on the website does not sign you up for emails, and joining the waitlist does not mean you have accepted analytics or advertising cookies.
If you would like us to delete your sign-up entirely rather than just unsubscribe, email hello@wingman-uk.com and we will remove your details from the waitlist, keeping only the minimum record needed to stop you being contacted again.
Messages sent through the Contact page and the venue form are passed on to a Wingman mailbox so that we can reply, and we reply to the address you gave. Venue partners who register interest will receive emails about the partnership they asked about. You can tell us at any time that you no longer wish to hear from us.
06Cookies, analytics and advertising technologies
Cookies are small files that a website stores on your device. Similar technologies include browser storage, pixels and tracking scripts. A pixel is a small piece of code that reports actions on a website back to the company that provides it.
At present, the only thing the Wingman website stores on your device is your cookie choice (a cookie called wm_consent, and the same record in your browser’s storage, with a random reference), so that we do not ask you again. It is strictly necessary for that purpose. No analytics, advertising or social media tracking tools are installed, and the website’s typefaces and code libraries are served from the website itself.
Tools we plan to use
Planned Before launch, we intend to add the following. Each will be listed in a cookie table on the website, with the cookies it sets and how long they last, before it goes live.
| Tool | Provider | Purpose | Category |
|---|---|---|---|
| Cookie consent banner | Wingman (built into the website; no outside consent tool is used) | Records your cookie choices so that we can respect them. | Strictly necessary |
| Website analytics | None is installed at present. If we add one, we will name it here, update this policy and ask for your permission first. | Would count visits and show how people use the website so that we can improve it. | Analytics |
| Meta Pixel | Meta, operator of Facebook and Instagram | Measures sign-ups that follow a Meta advert and enables retargeting on Facebook and Instagram. | Advertising |
| TikTok Pixel | TikTok | Measures sign-ups that follow a TikTok advert and enables retargeting on TikTok. | Advertising |
Your consent
Strictly necessary cookies are the only ones that are set without your consent. When you first visit, a banner lets you accept all non-essential cookies, reject them all, or choose by category. Rejecting is as easy as accepting, and no analytics or advertising tool will load until you have made a choice that allows it.
You can change your mind at any time through the “Cookie settings” link in the website footer. Withdrawing consent stops the tools from collecting further information from that point. We keep a record of your choice and when you made it.
Advertising measurement and retargeting
Planned If you accept advertising cookies, Meta Pixel and TikTok Pixel will send information about your visit, including the pages you view and whether you join the waitlist, to Meta and TikTok. We use this to understand which adverts lead to sign-ups and to show Wingman adverts to people who have visited the website.
Meta and TikTok may link this information to your Facebook, Instagram or TikTok account if you have one, and may use it in line with their own privacy policies, including to improve their advertising services. For the collection and transmission of this information through the pixels, we and each platform may be joint controllers. Once the platform has received the information, it decides how to use it as an independent controller.
You can also manage how these platforms use information for advertising through your settings on Facebook, Instagram and TikTok.
Your email address and advertising platforms
Consent to website cookies does not cover the use of your email address for advertising. We will not upload your email address to Meta, TikTok or any other advertising platform, and we will not turn on pixel features that send email addresses to them (sometimes called advanced or automatic matching), unless you have given separate, specific consent for that purpose.
07Who we share your information with
We share personal information only where necessary, and we never sell it. The organisations that receive it are:
- Website hosting: Netlify, Inc. (a United States company that serves the website from servers in several countries), which stores and serves the website and receives the technical information described in section 3.
- Sign-up storage: the Wingman website forms service and its database, run for us by Microsoft, on its Azure cloud service in the UK South region (United Kingdom), which hold waitlist sign-ups, venue enquiries, Contact page messages, consent records and the queue of emails.
- Email delivery: Hostinger, the provider of the Wingman mailbox, which carries our confirmation emails and the messages passed to our team, on our behalf.
- Fonts and code libraries: none. The website’s typefaces and code libraries are served from the website itself, so no third party receives your details for that.
- Cookie choices: recorded by the Wingman forms service named above; no outside consent tool is used.
- Planned Website analytics: A website analytics provider, which would provide website statistics on our behalf. None is installed at present.
- Planned Advertising platforms: Meta and TikTok, only if you accept advertising cookies, as described in section 6.
- Professional advisers, such as lawyers and accountants, where they need it to advise us.
- Authorities and regulators, where the law requires us to share information or where we need to protect our rights or the safety of others.
- A future owner of Wingman, if the business or its assets are sold or reorganised. Any new owner would have to use your information in line with this policy.
Our service providers act on our instructions under written contracts that require them to keep your information secure and to use it only to provide their services to us. Advertising platforms are not our service providers in this sense: they use the information they receive under their own terms, as explained in section 6.
08International transfers
Some of our service providers may operate outside the United Kingdom, for example in the United States, or use servers in other countries. Planned If you accept advertising cookies, Meta and TikTok may process information about your visit in the United States and other countries where they or their group companies operate. When personal information is transferred outside the UK, we make sure it remains protected by at least one of these safeguards:
- the destination country has been recognised by the UK Government as providing adequate protection, including the UK extension to the EU–US Data Privacy Framework for certified US organisations; or
- the transfer is covered by the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses issued under UK law.
For the providers in use today: our forms service and its database are held in the Microsoft Azure UK South region in the United Kingdom, so their storage does not leave the UK. Netlify, Inc. is a United States company; it states that it is certified to the UK Extension to the EU–US Data Privacy Framework and that it also uses the European Commission’s standard contractual clauses. Hostinger’s data processing addendum applies the UK International Data Transfer Addendum when it transfers customer data from the UK to a country the UK does not recognise as adequate. The safeguards for any analytics or advertising provider will be set out here before it is used. You can contact us for more information about the safeguards we use.
09Keeping your information secure
We use appropriate technical and organisational measures to protect personal information against loss, misuse and unauthorised access. The waitlist, venue enquiries and Contact page messages are held in the forms service’s own database, named in section 7, and not in the website’s own files. They can be retrieved only with the database login, which is held in the hosting provider’s private settings and not in the website or its code. The confirmation and unsubscribe links contain a random code that cannot be guessed. These measures include: the website is served over encrypted HTTPS only; the forms service accepts submissions only from the website itself, limits how many submissions one connection can make and talks to its database over an encrypted connection with the certificate checked; and nothing that identifies you is written to its logs.
No website or online service can be guaranteed to be completely secure. If a personal data breach occurs that is likely to put your rights at risk, we will report it to the Information Commissioner’s Office where required, and we will tell you without undue delay if the risk to you is high.
10How long we keep your information
We keep personal information only for as long as we need it for the purposes in section 4.
| Information | How long we keep it |
|---|---|
| Waitlist sign-ups | Until you remove yourself or ask us to delete them, or 90 days after the waitlist closes, whichever comes first. The waitlist closes on the day the Wingman app launches; that day has not been fixed yet. When that time comes we erase your name, email address, town and answers. If you had unsubscribed, we keep only the coded identifier of your address so that we do not contact you again by mistake. |
| Waitlist sign-ups that are never confirmed | We have not yet set a separate deadline for sign-ups that are never confirmed. Until we do, such a sign-up is kept under the waitlist rule above, or until you remove yourself or ask us to delete it, and we will state the deadline here once it is set. |
| Contact page messages | 12 calendar months after we close the message, then deleted together with the notification emails about it. We record the date we close each message when we have finished dealing with it; reading a message does not close it, and a message we have not closed is kept until we do. |
| Copies of the emails we send you | Kept with your sign-up and erased when you remove yourself or your sign-up is erased. We have not yet set a deadline for deleting copies that are held separately from a sign-up; we will state it here once it is set. |
| Venue registrations of interest | 12 calendar months after we close the enquiry (the date we record when we have finished dealing with it), then deleted together with the notification emails about it, unless we enter into a partnership, in which case the partnership terms will apply. An enquiry we have not closed is kept until we do. |
| Email consent records and unsubscribe records | For as long as we send marketing emails, so that we can show you agreed and make sure you are not contacted again after opting out. |
| Cookie choices | Your browser remembers your choice for 180 days and then the banner asks again. The record we hold has no name, email address or IP address in it. We have not yet set a deadline for deleting it, and we will state it here once it is set. |
| Analytics data | None is collected at present, because no analytics tool is installed. If we add one, we will state the period here. |
| Information sent to Meta and TikTok | Held by each platform under its own retention policy. |
| Emails and privacy requests | We have not yet set a fixed period for emails and privacy requests in our team mailbox, and will state it here once it is set. Until then we keep them only as long as we need to deal with the request, any follow-up and any complaint. This includes the copies of Contact page and venue messages that are delivered to our team mailbox, which we delete there by hand when we delete the message. |
| Website technical logs | The host of our forms service (Microsoft Azure) keeps its web request log for 3 days. Netlify, which delivers the website’s pages, keeps its own request logs under its own policy; it does not publish a fixed retention period. |
When the retention period ends, we delete the information or anonymise it so that it can no longer identify you. Deletion is carried out by the forms service itself, automatically, and removes the information from our live database at once. Backups of that database expire by themselves after 7 days, so deleted information can remain in a backup until then; a backup is used only to recover from a failure, and if one is ever restored the deletions are carried out again. Cookies stored on your device last for the periods shown in the cookie table on the website, and you can delete them at any time through your browser settings.
11Your rights
Under UK data protection law, you have the right to:
- access the personal information we hold about you and receive a copy of it;
- correct information that is inaccurate or incomplete;
- delete your information, in many circumstances;
- restrict how we use your information while a concern is being resolved;
- object to our use of your information where we rely on legitimate interests, and object at any time to marketing;
- receive information you gave us in a portable, machine-readable format, where we rely on your consent; and
- withdraw your consent at any time, whether to emails, cookies or audience uploads. This does not affect anything we did with your information before you withdrew it.
To use any of these rights, email hello@wingman-uk.com. We will respond within one month. If your request is complex, or you make several requests, we may extend this by up to two further months and will tell you why. We do not normally charge a fee. We may ask you to confirm your identity before we act on a request, to make sure we only release information to the right person.
To withdraw consent to cookies, use the cookie settings link described in section 6. For information that Meta or TikTok hold about you as independent controllers, you can also contact them directly.
12Children
Wingman is intended for adults. The website and waitlist are not directed at anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has joined the waitlist, please contact us and we will delete their details.
13Other websites
If the website links to other websites, such as a venue’s own site or an app store page, those websites have their own privacy policies. We are not responsible for how they handle your information.
14Complaints
If you have a concern about how we handle your information, please contact us first at hello@wingman-uk.com so that we can try to put it right.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:
- Website
- ico.org.uk/make-a-complaint
- Telephone
- 0303 123 1113
- Post
- Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
15Changes to this policy
We will update this policy when the website or the way we use personal information changes, including when planned features go live and when the Wingman app launches. The date at the top shows when it was last updated. If we make a significant change that affects people on the waitlist, we will tell you by email before the change takes effect.
16Contact us
If you have any questions about this policy or your information, please contact us.
- Company
- Nexus Equity Management Ltd
- hello@wingman-uk.com
- Post
- Nexus Equity Management Ltd, 63 West Gate, Mansfield, England, NG18 1RR
- Effective date
- 12 November 2026
- Last updated
- 12 November 2026