Privacy Policy

Last updated: April 2026.

Waystone Rail Ltd, a company registered in England and Wales (company number 16546116), with its registered office at Regents Business Park, 129 London Road, Nantwich, Cheshire, CW5 6LW, United Kingdom. References to “we”, “us”, or “our” in this policy refer to Waystone Rail Ltd.

If you have any questions about this policy or your personal data, please contact:

Email: contact@waystonerail.co.uk

We are committed to protecting personal data and handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy sets out how personal data is collected, used and protected when you use the website or contact us.

1. Information We Collect

We may collect the following types of personal data: ‍

  • Contact data – name, email address, phone number

  • Technical data – IP address, browser type, device information

  • Usage data – information on how the website is used

2. How We Collect Data

Data may be collected:

  • directly from you (for example, when you make contact)

  • automatically through cookies or similar technologies, subject to your consent where required

  • through analytics tools where these are enabled

3. How We Use Personal Data

Personal data is used to:

  • respond to enquiries

  • operate and improve the website

  • meet legal and regulatory obligations

Personal data is not used for unsolicited marketing.

4. Legal Basis for Processing

Personal data is processed on the basis of:

  • legitimate interests (responding to enquiries and operating the website)

  • consent (where required, for example in relation to cookies)

  • legal obligations

5. Data Retention

Personal data is retained only for as long as necessary for the purposes set out above, including where retention is required to meet legal or regulatory obligations.

6. Data Sharing and Security

Personal data is not sold or rented.

Data may be shared with service providers (including website hosting and analytics providers such as Squarespace) where necessary to operate and maintain the website, subject to appropriate confidentiality and data protection controls.

Appropriate technical and organisational measures are in place to protect personal data.

7. International Transfers

Where personal data is transferred outside the United Kingdom, appropriate safeguards will be applied in accordance with UK GDPR requirements.

8. Cookies and Analytics

The website uses cookies to support core functionality and to understand how it is used.

Cookies fall into the following categories:

  • Necessary cookies – required for the operation of the website and are always active

  • Performance and analytics cookies – used to understand how visitors interact with the website and improve performance

Non-essential cookies (such as analytics) are only set with your consent.

When you first visit the website, you are presented with a cookie banner that allows you to accept, decline, or manage your preferences. You can change or withdraw your consent at any time using the cookie settings available on the website.

Analytics services are provided by Squarespace, which may process data on our behalf.

9. Your Rights

Under UK GDPR, you have the right to:

  • access your personal data

  • request correction of inaccurate data

  • request deletion of personal data

  • object to processing

  • request transfer of your data

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk