Privacy Policy
Last updated: November 2026 ยท Version 3.2
Contents
1. Introduction

WellIntel UK ("WellIntel", "we", "us" or "our") is committed to protecting your privacy and handling your personal information in a transparent, secure and lawful manner.

This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you visit our website, create a user account, subscribe to our services or otherwise interact with WellIntel UK.

Our platform provides horse racing statistics, analytical data, research tools and related information services to customers throughout the United Kingdom. Some information is freely available to visitors, whilst enhanced content, historical databases and advanced analytical tools are available exclusively to registered subscribers.

We recognise that your personal information belongs to you. Protecting that information is fundamental to maintaining your trust in our services.

This Privacy Policy has been prepared in accordance with:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • Privacy and Electronic Communications Regulations 2003 (PECR)
  • Applicable UK legislation relating to electronic communications and data privacy.

This policy applies whenever you:

  • Visit our website
  • Register for a free account
  • Purchase a subscription
  • Contact us by email or online forms
  • Subscribe to newsletters or service updates
  • Participate in surveys or promotional activities
  • Communicate with our customer support team.

Where additional services are introduced in the future, including mobile applications, APIs or other online platforms, this Privacy Policy shall apply unless a separate privacy notice is provided.

By accessing our website you acknowledge that you have read this Privacy Policy.

2. About WellIntel UK

WellIntel UK is a United Kingdom based provider of horse racing statistical information, analytical tools and subscription services.

Our objective is to provide reliable race statistics, historical performance data, trends and analytical information designed to assist users in conducting their own research.

Our services are intended to provide factual information and statistical analysis only. Nothing provided through our website constitutes financial advice, betting advice, gambling recommendations or guarantees of future racing outcomes.

3. Our Commitment to Privacy

Privacy is a fundamental part of how we operate. We are committed to:

  • collecting only the personal information we genuinely require
  • being transparent about how we use that information
  • ensuring information remains accurate and secure
  • never selling your personal information to third parties
  • allowing you to exercise your legal rights over your personal data
  • continually reviewing our privacy practices to ensure ongoing compliance with UK law.

Whenever we ask for personal information we will explain:

  • why it is required
  • how it will be used
  • how long it will be retained
  • who it may be shared with
  • what choices you have regarding its use.
4. Definitions

For the purposes of this Privacy Policy:

Account means your registered WellIntel user account.

Subscriber means any individual or organisation holding an active paid subscription.

Personal Data means any information relating to an identified or identifiable individual as defined within Article 4 of UK GDPR.

Processing means any operation performed on personal information including collection, storage, organisation, retrieval, use, disclosure or deletion.

Website refers to all WellIntel owned websites and associated online services.

Cookies means small text files stored on your device which enable website functionality and improve user experience.

Third Party Processor means an organisation processing personal information on our behalf under a contractual agreement.

5. Data Controller

For the purposes of UK data protection legislation, WellIntel UK acts as the Data Controller for the personal information collected through this website.

We are registered with the Information Commissioner's Office (ICO) under registration reference ZC259872.

As Data Controller we determine:

  • what personal information is collected
  • why it is collected
  • how it is used
  • who it is shared with
  • how long it is retained
  • how it is protected.

Should our corporate structure change in the future through merger, acquisition or company reorganisation, responsibility for processing personal data will only transfer where permitted by applicable law.

6. Scope of this Privacy Policy

This Privacy Policy applies to personal information collected through:

  • our public website
  • subscriber-only areas
  • customer account registration
  • subscription purchases
  • customer support enquiries
  • newsletters
  • promotional communications
  • surveys and questionnaires
  • online competitions
  • social media interactions where applicable.

This policy does not apply to third-party websites which may be accessed through links published on our website. Where you follow a link to another website, that organisation will operate under its own privacy policy and terms. We encourage users to review those policies before submitting personal information.

7. Principles We Follow

Whenever we process personal information we follow the seven principles established by UK GDPR. Personal information shall be:

  • processed lawfully, fairly and transparently
  • collected for specified and legitimate purposes
  • limited to information genuinely required
  • kept accurate and up to date
  • retained only as long as necessary
  • protected by appropriate technical and organisational security measures
  • processed in a manner that demonstrates accountability.

These principles underpin every aspect of our data protection programme.

8. Categories of Personal Information We Collect

The type of information we collect depends upon how you interact with WellIntel UK.

8.1 Website Visitors

When you simply browse our website we may automatically collect:

  • IP address
  • browser type and version
  • operating system
  • language settings
  • referring website
  • pages visited
  • date and time of access
  • time spent on pages
  • clickstream information
  • device identifiers
  • cookie preferences.

Much of this information cannot identify you directly but assists us in improving website performance, security and user experience.

8.2 Registered Users

When you create an account we may collect:

  • full name
  • email address
  • username
  • securely encrypted password
  • account creation date
  • account status
  • login history
  • password reset requests
  • authentication records
  • communication preferences.

Passwords are never stored in plain text. Industry standard password hashing and encryption technologies are used to protect user credentials.

8.3 Subscribers

When you purchase a subscription to WellIntel UK, we collect additional information necessary to administer your account and provide the services you have requested. This may include:

  • subscription type and level
  • subscription commencement and renewal dates
  • billing name and address
  • VAT information where applicable
  • payment status
  • invoice history
  • subscription renewal history
  • promotional offers applied
  • account preferences
  • customer support history.

We do not collect or store your full debit or credit card details. All payment transactions are processed securely by our independent payment provider, Stripe.

8.4 Payment Processing

WellIntel UK uses Stripe Payments Europe Ltd (or its affiliated entities) to process all online subscription payments. When making a payment, you will be transferred securely to Stripe's payment platform or an embedded Stripe payment interface. Depending upon the payment method selected, Stripe may collect:

  • cardholder name
  • payment card information
  • billing address
  • payment authentication information
  • transaction details
  • fraud prevention information.

WellIntel UK does not receive, process or retain: full card numbers, CVV security codes, authentication credentials, or banking login information. We receive only the information necessary to confirm successful payment, payment reference, subscription status, payment date and transaction identifier.

Stripe acts as an independent data controller for payment information processed through its systems. We recommend users review Stripe's own Privacy Policy to understand how payment information is processed.

8.5 Technical Information

In order to provide a secure and reliable online service, we may automatically collect certain technical information relating to your use of the website. This may include:

  • IP address
  • browser type and version
  • operating system
  • screen resolution
  • device type
  • approximate geographic location derived from IP address
  • internet service provider
  • session identifiers
  • referring URLs
  • pages viewed
  • duration of visits
  • search terms entered within the website
  • error reports
  • diagnostic information.

This information helps us improve website performance, identify software faults, optimise compatibility, detect fraudulent activity, maintain security, and understand how visitors use our services. Where possible, statistical information is anonymised or aggregated.

8.6 Communications

If you contact WellIntel UK, we may retain records of communications including emails, website enquiry forms, customer support requests, technical support enquiries, complaints, compliments, suggestions, feedback and survey responses.

We may also retain internal notes relating to customer support interactions where necessary to provide ongoing assistance or resolve disputes. Telephone calls are not routinely recorded unless users are notified in advance.

8.7 App Notifications

If you use the WellIntel app and choose to turn on notifications, we store a push notification address (a device token) that your phone's operating system provides, together with your account, whether notifications are on, and when it was last updated. It contains no name, contact details or location. We use it only to send WellIntel notices, such as when tomorrow's reports are published.

You can turn notifications off at any time in Settings in the app, or in your phone's own settings. On iPhone, notices are delivered through Apple Push Notification service, operated by Apple.

9. How We Collect Personal Information

We collect personal information in several different ways.

9.1 Information you provide directly

You provide personal information when you create an account, purchase a subscription, subscribe to newsletters, contact customer support, complete online forms, enter competitions, respond to surveys, request information, or participate in promotions.

9.2 Information collected automatically

Certain technical information is collected automatically whenever you visit our website. This includes cookies, log files, website analytics, security monitoring and authentication records. This information assists us in operating, maintaining and securing our online services.

9.3 Information from third parties

We may receive limited personal information from carefully selected third parties including Stripe, website hosting providers, analytics providers, identity verification services, fraud prevention providers, and email delivery services. We only receive information that is necessary to provide our services or fulfil legal obligations.

10. Lawful Basis for Processing Personal Information

Article 6 of UK GDPR requires organisations to have a lawful basis before processing personal data. Depending upon the circumstances, WellIntel UK relies upon one or more of the following lawful bases.

10.1 Performance of a Contract

We process personal information where necessary to create your account, authenticate users, manage subscriptions, provide subscriber services, process renewals, respond to support requests, and maintain customer accounts. Without this information we may be unable to provide our services.

10.2 Legal Obligations

We process certain information to comply with legal obligations including financial reporting, taxation, accounting, fraud prevention, and responding to lawful requests from public authorities.

10.3 Legitimate Interests

We may process information where necessary for our legitimate business interests provided those interests do not override your rights and freedoms. Examples include website security, fraud detection, improving our services, analysing website usage, maintaining customer records, responding to enquiries, and preventing misuse of subscriber accounts. Whenever legitimate interests are relied upon, we undertake an appropriate balancing assessment.

10.4 Consent

Certain processing activities rely upon your consent. These include marketing emails where required, optional newsletters, non-essential cookies, and website analytics where consent is required. You may withdraw your consent at any time. Withdrawal does not affect processing carried out before consent was withdrawn.

11. How We Use Personal Information

We use personal information only where necessary for legitimate business purposes. Typical uses include:

  • creating user accounts
  • providing subscription services
  • verifying user identity
  • processing subscription renewals
  • sending service notifications
  • responding to enquiries
  • improving website performance
  • preventing fraud
  • maintaining website security
  • complying with legal obligations
  • producing anonymous statistical reports
  • maintaining business records.

We do not use personal information for automated marketing profiling without an appropriate lawful basis.

12. User Accounts and Authentication

Registered users are responsible for maintaining the confidentiality of their login credentials. Users should:

  • choose strong passwords
  • avoid sharing passwords
  • keep login information confidential
  • notify WellIntel immediately if unauthorised access is suspected.

We may record authentication events including successful logins, failed login attempts, password reset requests, account lockouts, and suspicious authentication activity. These records assist us in protecting user accounts and detecting fraudulent activity.

Where necessary, accounts may be temporarily suspended while suspicious activity is investigated.

13. Marketing Communications

WellIntel UK occasionally sends communications relating to our services.

13.1 Service Communications

Service communications are necessary for administration of your account. Examples include subscription confirmations, renewal reminders, password reset emails, important security notifications, service interruption notices, and changes to our Terms or Privacy Policy. These communications cannot normally be opted out of while your account remains active.

13.2 Marketing Communications

Where permitted under PECR, or where you have provided consent, we may send information regarding new services, platform enhancements, special subscriber offers, newsletters, and industry insights.

You may unsubscribe from marketing communications at any time using the unsubscribe link contained within each email or by contacting us directly. We never sell mailing lists to third parties.

14. Automated Decision Making

WellIntel UK does not make decisions about individuals based solely on automated processing where those decisions produce legal or similarly significant effects.

While automated systems may be used to authenticate user logins, detect suspicious activity, identify fraudulent payment attempts, and improve website security, all significant decisions affecting customer accounts are subject to appropriate human review.

15. Cookies and Similar Technologies

WellIntel UK uses cookies and similar technologies to ensure the website operates efficiently, provides a secure user experience and helps us understand how our website is used.

Some cookies are essential for the operation of the website and cannot be disabled without affecting core functionality, such as user authentication, account login and security.

Other cookies, including analytics and preference cookies, are used only where you have provided your consent.

A full explanation of the cookies we use, the purpose of each cookie, how long cookies remain on your device and how you can manage your preferences is available in our separate Cookie Policy.

Your cookie preferences can be changed at any time using the cookie settings available on our website.

16. Third-Party Service Providers

In order to operate our website efficiently and securely, WellIntel UK works with carefully selected third-party organisations who provide specialist services on our behalf.

Where these organisations process personal information on our behalf, they do so only under written contractual agreements requiring them to:

  • process personal information only on our documented instructions
  • maintain appropriate technical and organisational security measures
  • comply with UK data protection legislation
  • maintain confidentiality
  • assist us in fulfilling our legal obligations where appropriate.

We regularly review our service providers to ensure they continue to meet appropriate standards of security, reliability and regulatory compliance.

16.1 Categories of Third-Party Providers

Depending upon the services you use, we may engage providers in the following categories:

  • secure payment processing
  • website hosting
  • cloud infrastructure
  • website security
  • website analytics
  • email delivery services
  • customer support systems
  • accounting services
  • professional advisers
  • regulatory authorities where legally required.

The identity of individual service providers may change from time to time as our business develops. This Privacy Policy applies regardless of which provider is engaged, provided they offer equivalent services and appropriate safeguards.

16.2 Stripe Payment Processing

All online subscription payments are securely processed by Stripe. When making a payment, your payment information is transmitted directly to Stripe using encrypted connections.

WellIntel UK does not collect, receive or store full payment card numbers, card verification (CVV/CVC) codes, online banking credentials, or payment authentication data. Stripe provides us only with the information necessary to confirm that payment has been authorised and to administer your subscription.

Users should refer to Stripe's own Privacy Policy for further information regarding the processing of payment information.

16.3 Website Hosting

Our website and subscriber platform are hosted using professionally managed infrastructure designed to provide high levels of availability, secure encrypted communications, regular system maintenance, and appropriate physical and network security. Hosting providers may process limited personal information solely for the purpose of delivering our online services.

16.4 Professional Advisers

Where necessary, we may disclose relevant personal information to professional advisers including accountants, solicitors, auditors, insurers, and IT security consultants. Such disclosures occur only where necessary for legitimate business purposes or to comply with legal obligations. All professional advisers are subject to appropriate confidentiality obligations.

16.5 Regulatory Authorities

We may disclose personal information where required by law, including where disclosure is necessary to comply with legal obligations, respond to lawful requests from regulatory authorities, protect our legal rights, prevent fraud or criminal activity, or protect the rights and safety of users. We will never disclose personal information to third parties for their own marketing purposes.

17. International Transfers of Personal Information

Some organisations providing services to WellIntel UK may process personal information outside the United Kingdom.

Where international transfers occur, we ensure that appropriate safeguards are implemented in accordance with Chapter V of the UK General Data Protection Regulation. These safeguards may include:

  • transfers to countries recognised by the UK Government as providing an adequate level of protection
  • International Data Transfer Agreements (IDTAs)
  • the UK Addendum to the European Commission's Standard Contractual Clauses
  • other legally recognised transfer mechanisms.

Before engaging any overseas service provider, we undertake appropriate due diligence to ensure personal information remains adequately protected. Where users request additional information regarding international transfers, we will provide details where legally appropriate.

18. Data Security

Protecting customer information is a fundamental part of our business. We implement appropriate technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, disclosure, alteration or destruction. Our security programme is regularly reviewed and updated to reflect changes in technology, cyber security risks and regulatory guidance.

18.1 Technical Security Measures

Our security measures may include:

  • encrypted website communications using HTTPS
  • industry-standard password hashing
  • encrypted storage of sensitive information where appropriate
  • secure user authentication
  • firewalls and network security controls
  • malware protection
  • vulnerability monitoring
  • system logging
  • intrusion detection where appropriate
  • regular software updates and security patching.

Security measures are reviewed periodically to ensure they remain appropriate for the nature of our services.

18.2 Organisational Security Measures

In addition to technical safeguards, we maintain organisational measures designed to protect personal information. These include:

  • controlled staff access to personal information
  • confidentiality obligations
  • appropriate staff training
  • documented security procedures
  • regular reviews of supplier security
  • incident response procedures
  • secure disposal of personal information when no longer required.

Access to personal information is limited to those individuals who require access in order to perform their duties.

18.3 User Responsibilities

While WellIntel UK takes appropriate steps to protect user accounts, security is a shared responsibility. Users are encouraged to select strong passwords, avoid reusing passwords across multiple websites, keep login credentials confidential, log out from shared devices, and notify us promptly if they suspect unauthorised access to their account.

Failure to protect account credentials may increase the risk of unauthorised access for which WellIntel UK cannot accept responsibility where reasonable security measures have already been implemented.

18.4 Business Continuity

We maintain procedures designed to support the continued availability of our online services. These procedures may include secure system backups, disaster recovery planning, infrastructure redundancy where appropriate, monitoring of critical systems, and periodic testing of recovery procedures.

Whilst every reasonable effort is made to maintain uninterrupted access, no internet-based service can guarantee continuous availability.

19. Data Retention

WellIntel UK retains personal information only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, resolve disputes and enforce our legal agreements.

Retention periods are determined by considering the nature of the information held, the purpose for which it was collected, applicable legal and regulatory requirements, contractual obligations, and legitimate business needs.

Where personal information is no longer required, it will be securely deleted, anonymised or otherwise disposed of using appropriate security procedures.

Typical retention periods include:

Information Type Typical Retention Period
Website enquiriesUp to 24 months
Customer support recordsUp to 3 years after closure
Registered user accountsWhilst account remains active
Inactive user accountsNormally deleted or anonymised after 24 months of inactivity, unless retention is required by law
Subscription recordsDuration of subscription plus applicable statutory retention period
Financial recordsNormally 6 years following the end of the relevant financial year (or longer where legally required)
Marketing preferencesUntil consent is withdrawn or marketing is no longer appropriate
Website security logsNormally up to 12 months
App notification addressesKept while your account is active and deleted when you delete your account. An address is no longer used once notifications are turned off or the app is removed
Cookie consent recordsAs required to demonstrate compliance with applicable legislation

Retention periods may be extended where required by law, legal proceedings or regulatory investigations.

20. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have several important rights regarding your personal information. These rights include:

20.1 Right of Access

You may request confirmation of whether we process your personal information and obtain a copy of that information.

20.2 Right to Rectification

You may request correction of inaccurate or incomplete personal information. Where appropriate, we may ask for evidence to verify the accuracy of requested changes. You can also update your email address and display name yourself at any time in the Settings page after signing in.

20.3 Right to Erasure

You may request deletion of your personal information where it is no longer necessary, you withdraw consent where consent is the legal basis, processing is unlawful, or you successfully object to processing. This right is subject to certain legal exceptions, including where we are required to retain information by law.

If you have an account, you can delete it yourself at any time from the Settings page after signing in. This removes your account details, saved shortlist, sign-in records, app notification addresses and any messages you sent us through the contact form from our live systems straight away. Copies held in routine backups are removed as those backups are replaced, and our email delivery provider may keep delivery logs for a limited period. We may keep limited records where the law requires us to.

20.4 Right to Restrict Processing

You may request that we temporarily restrict processing while certain issues are investigated, including disputes regarding accuracy or the lawful basis for processing.

20.5 Right to Data Portability

Where technically feasible and legally applicable, you may request a copy of personal information you have provided to us in a structured, commonly used and machine-readable format.

20.6 Right to Object

You may object to processing carried out on the basis of legitimate interests. You also have an absolute right to object to the processing of your personal information for direct marketing purposes. Where such an objection is received, marketing communications will cease without undue delay.

20.7 Right to Withdraw Consent

Where processing is based upon consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

21. Exercising Your Rights

Requests relating to your personal information should be submitted using the contact details provided at the end of this Privacy Policy.

To protect personal information, we may request reasonable evidence of identity before responding to certain requests.

We aim to respond to all valid requests within one calendar month, although this period may be extended where permitted by law for particularly complex requests.

There is normally no charge for exercising your rights. However, we reserve the right to charge a reasonable administrative fee or refuse requests that are manifestly unfounded, excessive or repetitive, as permitted under applicable legislation.

22. Data Breaches

Although we employ appropriate security measures, no system connected to the internet can ever be guaranteed to be completely secure.

In the event of a personal data breach, WellIntel UK will follow its documented incident response procedures. Where required by UK GDPR, we will:

  • investigate the incident promptly
  • take appropriate steps to minimise any impact
  • notify the Information Commissioner's Office (ICO) within the required statutory timescales where applicable
  • notify affected individuals where there is a high risk to their rights and freedoms.

We maintain internal records of all personal data breaches, regardless of whether formal notification is required.

23. Children's Privacy

Our services are intended for adults aged 18 years or over. We do not knowingly collect personal information from children.

If we become aware that personal information relating to a child has been submitted without appropriate authority, we will take reasonable steps to remove that information from our systems as soon as practicable.

Parents or guardians who believe a child has provided personal information should contact us using the details provided below.

24. External Websites

Our website may contain links to third-party websites operated by independent organisations. This Privacy Policy applies solely to WellIntel UK. We are not responsible for the privacy practices, security or content of third-party websites.

Users are encouraged to review the privacy policies of any external websites they visit.

25. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, regulatory guidance, technological developments, changes to our services, or improvements to our data protection practices.

The latest version will always be published on our website together with the version number and effective date.

Where changes materially affect the way we process personal information, we will take reasonable steps to notify registered users by appropriate means.

26. Complaints

If you have any concerns regarding the way WellIntel UK processes your personal information, we encourage you to contact us first so that we have an opportunity to resolve your concerns.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office.

Information Commissioner's Office
Website: https://www.ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

Making a complaint to the ICO does not affect any other legal rights or remedies available to you.

27. Contact Us

If you have any questions regarding this Privacy Policy, your personal information or your rights under UK data protection legislation, please contact:

WellIntel UK
Data Protection Enquiries
Email: contact@wellintel.co.uk
Website: www.wellintel.co.uk
Postal Address: WorkHub (Signal), Off Newport St, Tiverton, EX16 6FZ, United Kingdom.

We aim to acknowledge privacy-related enquiries as promptly as possible and to respond to formal requests within the timescales required by applicable legislation.

28. Document Control

Version: 3.2
Effective Date: November 2026

This document is reviewed periodically and updated as necessary to reflect changes in our practices or applicable law.