Privacy notice

Last updated: 13 September 2026.

Craftworks Labs S.R.L. (CUI RO48293568), Str. Constantin Moise 5D, Sector 6, București, Romania, trading as wantasite.co.uk. This notice explains how we handle personal data as an EU controller, and how UK visitors are treated under UK GDPR and PECR for cookies. It is written in English.

1. Who we are

The controller is Craftworks Labs S.R.L. (CUI RO48293568), Str. Constantin Moise 5D, Sector 6, București, Romania, trading as wantasite. We are not a UK limited company and we do not run a London office.

Contact: hello@wantasite.co.uk. Monday–Friday, 09:00–17:30 UK time. There is no UK phone number on this site.

2. What this site does

wantasite.co.uk is a marketing site for brochure websites, SEO, Google Ads and ChatGPT Ads sold to UK businesses. You can read the pages without an account. If you want a demo, you send an enquiry. Paid work starts only after you approve a demo or we confirm another service in writing. wantasite.uk redirects here; this notice covers both hostnames.

3. Data we collect and data we do not collect

We collect what you type on the enquiry form (section 4), technical hosting logs our provider needs to run the site, and — only if you opt in — analytics or ads measurement cookies described in the cookie policy. If you become a client we will also process billing details you send us for invoices (name, business address, VAT number where relevant, plan and amounts). We do not take card numbers on this website.

We do not collect a UK phone book, call recordings, or a public directory of visitors. We do not ask you to create a login to browse. We do not scrape your contacts. We do not use hidden tracking beyond what this notice and the cookie policy describe. Optional analytics and marketing stay off until you consent, and only load if the relevant Google tag is actually configured. We do not sell personal data.

4. Enquiry form data

The enquiry form asks for:

• Name
• Email address
• UK phone number
• Business type (limited company, sole trader, or not yet trading)
• Timeline
• Interest (website, SEO, Google Ads or ChatGPT Ads)
• Optional details, and any plan you already picked

You must confirm we may reply about that enquiry. We store the submission so we can process it: build a demo, answer questions, and keep a record of what you asked for. If email sending is configured, Resend delivers a notification to our inbox. If it is not configured, the enquiry is still logged on our server so we can follow it up. We do not sell the list.

A hidden field is used only to catch automated spam. We do not treat it as a real business field.

5. Cookies

Strictly necessary storage keeps the site working. Analytics (Google Analytics 4, if configured) and marketing (Google Ads, if configured) stay off until you accept. Google Consent Mode v2 defaults to denied. Your choice is stored in the browser under the local storage key wantasite-cookie-consent. Full names, purposes and how to change the choice are on the cookie policy. PECR: rejecting optional cookies is as easy as accepting them.

6. How we use personal data

• Reply to your enquiry and send the private demo if you asked for one.
• Provide website, SEO or ads services you have ordered.
• Send invoices and payment instructions when a subscription starts.
• Run this website, keep it secure, and debug faults.
• Measure traffic or ads only if you consented and the matching tag is configured.
• Meet tax, accounting and other legal duties.

We do not put enquiry form submissions into a public AI training set. We do not use the form to build a marketing list for unrelated products.

7. Legal bases

• Contract, or steps before a contract (GDPR Art. 6(1)(b)): answering the enquiry, building the demo you asked for, and supplying a paid plan.
• Legitimate interests (Art. 6(1)(f)): running a B2B site, keeping it secure, keeping a record of what was asked, and defending claims. You can object; see section 12.
• Consent (Art. 6(1)(a) and PECR): optional analytics and marketing cookies. You can withdraw it with Cookie settings without affecting the enquiry itself.
• Legal obligation (Art. 6(1)(c)): invoices and records we must keep under Romanian accounting and tax law.

8. Processors

We use a short list of providers to run the site:

If you run Google Ads or ChatGPT Ads, those platforms process campaign data on your account. We are then a user of your account, not a reseller of the media. OpenAI and Google will have their own notices for that.

9. Retention

• Enquiries with no contract: kept as long as needed to reply and to show what was requested, typically up to 24 months if no paid work starts, then deleted or anonymised unless we must keep a narrower record (for example a complaint).
• Clients: contract, service and invoice records for the life of the relationship and then for as long as Romanian tax and accounting rules require (invoices at least five years).
• Cookie choice: stored in your browser; our policy is 12 months, and you can change it sooner. See the cookie policy.
• Hosting logs: as kept by Vercel for security and operations, typically a matter of days to weeks unless an incident needs a longer look.

10. Sharing

We do not sell personal data. We share it with the processors above, with professional advisers if a dispute needs them, and with authorities when the law requires it. If we ever transfer this business, the enquiry and client files would move with it on the same terms.

11. International transfers

We are established in Romania (EU). Data is processed in Romania and elsewhere in the EEA in the ordinary course. Some processors (Vercel, Resend, Google) may process data in the United Kingdom or the United States. Where a transfer outside the EEA or UK is needed, we rely on the safeguards those providers describe in their terms — typically the EU-US Data Privacy Framework where they are certified, and/or standard contractual clauses.

12. Your rights

Under GDPR (and UK GDPR where it applies) you can ask us for access, rectification, erasure, restriction, objection, and data portability, and you can withdraw cookie consent at any time. We may need to confirm who you are. We will answer without undue delay and within one month, or tell you if we need more time as the law allows.

Email hello@wantasite.co.uk to exercise a right. You can also complain to:

• ANSPDCP (Romania), dataprotection.ro — our lead supervisory authority as an EU controller.
• ICO (United Kingdom), ico.org.uk — if you are in the UK.

You can contact those authorities without waiting for our complaints process. There is no automated decision-making that produces legal or similarly significant effects on this site.

13. Children

This site and these services are for businesses, not for anyone under 16. We do not knowingly collect personal data from children. If you believe a child has sent us an enquiry, email hello@wantasite.co.uk and we will delete it.

14. Contact and changes

Questions about this notice: hello@wantasite.co.uk. Monday–Friday, 09:00–17:30 UK time. We will update this page when our practices change and change the date at the top. If a change is material and we still hold your enquiry or contract email, we will also write to that address where it is reasonable to do so.

Related: Cookie policy, Terms, Complaints.